For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Mar 05, 2014

Whitelist a user agent

We use Pingdom to alert us when our site is down. We also block most IP Addresses that are not within the United States (we do business only within the US). Is there a way that I can whitelist the Pi...
ASM Advanced WAF
management
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 05, 2014

There are tons of browser-based tools to manipulate HTTP headers, as well as simply doing something like this:

curl -k -H "User-Agent: pingdom" https://yoursite.domain.com

Filtering on IP addresses would be much harder to spoof, but still not completely impossible.