Forum Discussion
saidshow_251381
Aug 30, 2017Cirrostratus
Turn off File type check for a specific URL
Hi, we have some dynamic urls that from time to time will include a fullstop. Is is possible to disable only the illegal file type check for uris that start with "/foo/foo1/"? I would not want to dis...
- Aug 30, 2017
when ASM_REQUEST_DONE { if { [HTTP::uri] starts_with "/&siteid=" && [ASM::violation count] < 5 } { if { [ASM::violation_data] contains "VIOLATION_OBJ_TYPE"} { ASM::unblock } } else { More than one violation, too dangerous to Unblock return } }
I have made only minor modification to what Arnaud has done here: https://devcentral.f5.com/questions/irule-for-asm
Stanislas_Piro2
Aug 30, 2017Cumulonimbus
Hi,
you can create 2 ASM policies:
- one with no file type blocking
- one with file type blocking and list configured.
one the LTM policy enabling the ASM policy, create a new rule above with condition "/foo/foo1/" and assign the no file type blocking ASM policy.
If you are working in version 13 , you can create a policy as parent and both ASM policies are child policies of the parent. this allow to configure only one policy.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects