Forum Discussion

Anthony's avatar
Anthony
Icon for Nimbostratus rankNimbostratus
Jun 19, 2018

URL string map and ASM

Hi all, I'm looking into some ASM blocks that are being triggered for an illegal URL violation.   We have an application call coming in as /app-abc/... which we use an iRule to string map the cal...
ASM Advanced WAF
devops
iRules
security
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Jun 19, 2018

ASM is one of the last product evaluated...

 

  • First is AFM with FLOW_INIT event
  • Then LTM with CLIENT_ACCEPTED, CLIENT_DATA, HTTP_REQUEST events
  • Then LTM with CLIENT_ACCEPTED, CLIENT_DATA, HTTP_REQUEST events
  • Then APM with ACCESS_SESSION_STARTED event
  • and finally ASM

So when you change URI in HTTP_REQUEST event, ASM will see the new URI.

 

This is useful when we want to disable ASM or change ASM policy based on URI.