For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Mar 05, 2014

Whitelist a user agent

We use Pingdom to alert us when our site is down. We also block most IP Addresses that are not within the United States (we do business only within the US). Is there a way that I can whitelist the Pi...
ASM Advanced WAF
management
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 05, 2014

Something like this perhaps:

when CLIENT_ACCEPTED {
    if { ( [class match [IP::client_addr] equals pingdom_list] ) or ( [whereis $ip country] equals "US" ) } {
        return
    } else {
        drop
    }
}

where "pingdom_list" is an address-based data group of Pingdom source addresses (and/or source networks). You can also perform this function in an HTTP_REQUEST event, in case you want to send an HTML response for requests not allowed.