For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amr_Ali's avatar
Amr_Ali
Icon for MVP rankMVP
May 28, 2023

We want to allow specific IPs to access a link on my web application and block other

Hi Everyone.   We want to allow specific IPs to access a link on my web application and block other IPs. Is there a way to do this in F5 ASM? Thank you for your feedback.
application delivery
security
AlexBCT's avatar
AlexBCT
Icon for Cumulonimbus rankCumulonimbus
May 28, 2023

Hi, 

You should be able to do it via the IP address exceptions if you really want to, but you'll probably find that this will be much easier (and better) using an iRule (such as this one from Kevin; https://community.f5.com/t5/technical-forum/irule-for-ip-whitelist-on-specific-url/td-p/213513) or using a Local Traffic Policy. 

Although ASM can track and block IP's, in general it is not geared towards filtering based on IP's. Any particular reason why you want to do it via there? 

  • Amr_Ali's avatar
    Amr_Ali
    Icon for MVP rankMVP
    May 28, 2023

    Thanks, Alex , yes our customer needs some specific IP that can reach and open the admin page for their applications

    • AlexBCT's avatar
      AlexBCT
      Icon for Cumulonimbus rankCumulonimbus
      May 28, 2023

      In that case I would indeed go for a Local Traffic Policy - it will be easy to manage and if you use a DataGroup for the IP's, easy to update as well.