Forum Discussion
Fouad_Al_Jaouni
Nimbostratus
NimbostratusWhitelisting an IP address for a specific signature
I am running ASM on version 11.5. I understand that IP exception list can be used to whitelist certain IP addresses, however is it possible to whitelist the IP for a specific signature?
Vitaliy_Savrans
Nacreous
NacreousHi,
you can use something like this irule:
when ASM_REQUEST_DONE {
if { [ASM::violation attack_types] equals "ATTACK_TYPE_SQL_INJECTION"} {
ASM::unblock
}
}
More informaton about events in irule https://devcentral.f5.com/wiki/iRules.ASM__violation.ashx
nathe
Cirrocumulus
CirrocumulusAnd if you haven't already I believe you need to pop a check against "Trigger ASM iRule Events" in the policy (configuration/advanced screen).
