Forum Discussion

mlamutt1_191938's avatar
mlamutt1_191938
Icon for Nimbostratus rankNimbostratus
Nov 30, 2015

Security Policy HTTPS redirect

Hi all,

We are using a security policy on our LTM Virtual server to block access (and redirect to a "you are blocked page") from a list sanctioned countries. We are using an irule to do the redirect, on Action = "Accept Decisively". The redirect for HTTP works great, but I have not been able to get the HTTPS to redirect. I have tired several different irule configurations but none of them have worked.

irule: when CLIENT_ACCEPTED {

     SSL::profile /www-qa/xxx.site.443.profile.clientssl
     log local0. "XXXHTTP client accepted"

}

when HTTP_RESPONSE { log local0. "XXXHTTP responding data" HTTP::redirect https://you.are.blocked.com\r\n\r\n }

Any ideas on what I am missing, or a better way to add a redirect on a HTTPS securTty policy?

thanks

  • I assume the provided iRule is incomplete because it makes no check for the source of the request. Can you provide the full rule? Also, are you using the same iRule in the http and https Virtual Servers?