Forum Discussion

sachin_80710's avatar
sachin_80710
Icon for Nimbostratus rankNimbostratus
Jul 08, 2015

RegEX ASM Allowed URL list

Hi,   To consolidate allowed URL list in ASM policy, i have created Allowed URL with RegEX for session id in URL, I have used RegEX tool available on F5 GUI under OPTIONS >> Application Security ...
ASM Advanced WAF
deployment
security
Arnaud_Lemaire's avatar
Arnaud_Lemaire
Icon for Employee rankEmployee
Jul 28, 2015

Hi Sachin,

 

i think regular expressions support is more for attack signature definition and pure sessionid. when playing with entity (url, parameter, coookie, file type)

 

What you have in your example is a dynamic url, not a session id. So you can only use wildcard concept with limited function: https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-1-0/asm_wildcard.html?sr=47048222

 

Wildcard CharacterDescription

 

"*"Match all characters

 

"?"Match any single character

 

[seq]Match any character that is in the specified sequence

 

[!seq]Match any character that is not in the specified sequence