For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 11, 2014

The above basically says: 

if the URI is /xyz-ws
    if the client is internal - allow
    if the client is external - drop
else
    allow all

In other words, it only does the IP evaluation if the client requests this specific URL. You didn't mention a redirect in the original post.