For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

field_bad_service's avatar
field_bad_service
Icon for Altocumulus rankAltocumulus
Dec 12, 2023

Support Variables for ASM

This variable shows the Support ID which helps us find logs more easily when troubleshooting <%TS.request.ID()%>. However, when exposed on a Response Block Page, it is easy to identify that it is a ...
security
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 14, 2023

You can also just drop the packet with an irule but then investigation will be a bit harder 🙂

https://community.f5.com/t5/technical-forum/how-do-i-drop-traffic-on-asm/td-p/324482

 

Outside of that you can also play with rand function generator in the TCL to make a rand number and then return a custom page with that irule but in your logs to log the related support id to the rand number but that will be a big play and you have to be good with irules and tcl and better send the logs to siem with HSL high speed logging not to log locallly.

https://my.f5.com/manage/s/article/K22017023