Forum Discussion

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Mar 16, 2015

Trigger ASM iRule Events

with v11.6.. I've configured an ASM iRule to customize response pages. Some policies were in transparent mode and customer's feedback is that after the implementation of the iRule (and enabling "Trigger ASM iRule Events" option), those policies went into blocking mode.

 

IMHO, the blocking/transparent mode is not affected by that change. Anyone could confirm that?

 

Thanks

 

Alex

 

application delivery
ASM Advanced WAF
deployment
devops
iRules
security
  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Mar 26, 2015

    Opened a support case. First reaction: HTTP::uri is not supported in the ASM_REQUEST_DONE event.

    Wrong.. it is. But there is a bug:

    ID429063 - "ASMiRule: error during executing HTTP::method, HTTP::uri on ASM_REQUEST_DONE/VIOLATION EVENT for 100-Continue."

    This behaviour ( of the TCL error ) is marked as "FUNCTION AS DESIGNED", for 100-continue requests only. This behaviour is due to a fix that was created to anther bug, ID392895 - "iRule: Incorrect data in ASM_REQUEST_VIOLATION, ASM_REQUEST_BLOCKING events in case of violations in both parts of 100-continue request".

    100-requests are requests sent with header "Expect: 100-Continue".