For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nuruddin_Ahmed_'s avatar
Nuruddin_Ahmed_
Icon for Cirrostratus rankCirrostratus
Jun 12, 2016

URL Restriction Best Way

Hi,   I have hosted one URL for our company on F5 - xyz.com, due to security audits, i have been asked to allow only specific paths, like -   xyz.com/ucc/xyz/mnn xyz.com/abc/nuu/ooo xyz.com/ab...
application delivery
BIG-IP
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Jun 12, 2016
when HTTP_REQUEST {
set URI [string tolower[HTTP::uri]]
if { not ([class match $URI eq CLASS_ALLOWED_URI]) } {
discard
}
}

You would have to create a data-group and name it as CLASS_ALLOWED_URI (or anything else you want). The data-group will contain the list of allowed URI. The iRule uses reverse-logic and drops all requests that doesn't match the allowed URI list.