Forum Discussion

vishu_chavan's avatar
vishu_chavan
Icon for Altocumulus rankAltocumulus
Aug 28, 2023

Restricting access to a virtual server by Public IP address should access through only domain name.

    We had Published  website on F5 with Domain name ,now created domain is aviable in public ,but publish website is also accessible  with ip address in public domain.( we have created server pool...
security
  • ragunath154's avatar
    ragunath154
    Aug 29, 2023

    seems you have not used your Domain certificate under client ssl profile , check thebelow link to upload your CA domain certificate and key to bigip and followed to that you need to create client ssl profile point to your Domain certificate/key and any chain certificate.

    https://my.f5.com/manage/s/article/K14620#3

    once done you check your domain for any ssl issue by running test in below link

    https://www.sslshopper.com/ssl-checker.html

     

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Aug 28, 2023

Hi vishu_chavan , 

Could you please send the irule script that you use now. 

> it's mandatory to assign http profile for this irule. 
> although you have a non supported version and you need to upgrade , but try the below irule script : 

when HTTP_REQUEST {
	    if { ([HTTP::host] != "www.example.com") } {
	       reject
	    }
	}

> Replace "www.example.com" by your correct FQDN. 
and let me know the results