F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Dec 20, 2013

Tighter security for one geolocation only?

Our website needs tighter security for one geolocation. I thought of creating a separate security policy with tighter restrictions for web scrapping and DoS for this geolocation.   Is the best w...
management
Pragathishakart's avatar
Pragathishakart
Icon for Nimbostratus rankNimbostratus
Dec 27, 2013

Hi, Please refer below. http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-1-0/asm_security_policy.html

 

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Dec 27, 2013
It was suggested that I write an iRule to use the "whereis country" command[1] to insert a header[2] into the request so that a HTTPClass can be used to change policies on that header. THern I would need to configure the HTTPClass to match on the header and configure the policy for Mexico on that HTTPClass, when I setup that HTTPClass first in the HTTPClass order on the virtual, it will catch Mexican requests and other requests will fall back to the other HTTPClass. Will this work with ASM version 11.3?