Forum Discussion
Fouad_Al_Jaouni
Nimbostratus
NimbostratusWhitelisting an IP address for a specific signature
I am running ASM on version 11.5. I understand that IP exception list can be used to whitelist certain IP addresses, however is it possible to whitelist the IP for a specific signature?
2 Replies
Vitaliy_SavransNacreous
Hi,
you can use something like this irule:
when ASM_REQUEST_DONE { if { [ASM::violation attack_types] equals "ATTACK_TYPE_SQL_INJECTION"} { ASM::unblock } }More informaton about events in irule https://devcentral.f5.com/wiki/iRules.ASM__violation.ashx
natheCirrocumulus
And if you haven't already I believe you need to pop a check against "Trigger ASM iRule Events" in the policy (configuration/advanced screen).
