Forum Discussion
HarshaPotharaju
Mar 28, 2019Nimbostratus
URL rewrite iRule - ASM
ASM is blocking a request which doesn't have domain name in one of the parameters in the URI.
Background: example.domain.com is a VIP and has ASM enabled. Below is the default breakdown login pa...
Kai_Wilke
Apr 01, 2019MVP
Hi Harsha,
the
HTTP_REQUEST
event is executed before ASM received the request. If you manipulate the request within this event, ASM is going to enforce its policy based on the already manipulated request.
The iRule below will check for the badly formated login page requests and transparently rewrites them to the correct format.
when HTTP_REQUEST {
if { [string match -nocase "/login/login.html*&resource_url=/user/loginsso*" [HTTP::uri]] } then {
HTTP::uri [string map -nocase { "&resource_url=/user/loginsso" "&resource_url=https://example.domain.com/user/loginsso" } [HTTP::uri]]
}
}
Cheers, Kai
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects