For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

htkiet_42906's avatar
htkiet_42906
Icon for Nimbostratus rankNimbostratus
Mar 21, 2014

Pilot for ASM deployment

Hello friends,   Can you please help me as below:   I am deploying ASM for our customer, a bank. It is being used for internet banking, web application,... The ASM already learnt traffic and no...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Mar 21, 2014

Kiet,

Would this simple iRule work? I've taken this from another post bypass ASM

when HTTP_CLASS_SELECTED {
  ASM::enable
  if { [class match [IP::client_addr] ne asm_internal] } {
    ASM::disable
  }
}

So, create a datagroup called asm_internal with your internal IP address range and any source IP which doesn't match this will have ASM disabled.

Hope this helps,

N