Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Arthur_7109's avatar
Arthur_7109
Icon for Nimbostratus rankNimbostratus
Jan 04, 2011

The Blocking Reponse Page is blocked and looping :-)

Hi there,   On our ASM, for the Blocking Reponse Page, we use a redirect to a page on the application server:     So the browser is requesting   https://the.server/path-to/blocking-pag...
app sec
BIG-IP Access Policy Manager (APM)
security
Chris_Miller's avatar
Chris_Miller
Icon for Altostratus rankAltostratus
Jan 04, 2011
You could also use ASM::disable.

http://devcentral.f5.com/wiki/default.aspx/iRules/ASM__disable.html

Since disabling ASM disables it for the entire tcp connection, re-enabling it within the rule would seem necessary.

Slightly editing the example iRule in that article: 


 Disable ASM for URIs containing "blocking-page"
when HTTP_CLASS_SELECTED { 
  ASM::enable 
  if { [HTTP::uri] contains "blocking-page" } { 
    ASM::disable
  } 
}

Give that a shot perhaps?