For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

C_Kim's avatar
C_Kim
Icon for Nimbostratus rankNimbostratus
Jun 15, 2017

Some URI bypass iRule.

I have a simple iRule that checks the User-Agent string in the HTTP header and matches against a data group list. The purpose is to block web crawlers from crawling our websites. when HTTP_REQUEST...
iRules
LTM
security
mike_246361's avatar
mike_246361
Icon for Nimbostratus rankNimbostratus
Jun 15, 2017

You might want to take a look at this article:

 

https://devcentral.f5.com/articles/http-event-order-access-policy-manager

 

It says:

 

"For APM internal URIs, like /my.policy and /my.logout, the HTTP_REQUEST/HTTP_RESPONSE events don’t fire as you would expect beginning in v11.x. The traditional method to work around this (and other module complexities) is to use the vip targeting vip configuration"