Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Exclude url ASM

Santi_81436
Altostratus
Altostratus

Hi,

 

My version is BIG-IP 12.1.1 Build 2.0.204 Hotfix HF2, I would disable ASM over an url, for example:

 

I've an url type: /testing/servers/*

 

So I want to rule out of my security policy, can I exclude this url of my policy???

 

Currently I set this url on my policy, that so:

 

-Application Security : URLs : Allowed URLs : Allowed HTTP URLs -> /testing/servers/* - header-based Content Profile: any - From data

 

This is configuration isn't working

 

May you help me, please??

 

Thanks

 

2 REPLIES 2

CharlesCS
Cirrus
Cirrus

Rather than complicate your ASM policy, you can instead change the LTM Traffic Policy by changing the default rule to check whether the URI path does not begin with "/testing/servers/", and enable ASM only if the traffic is matched.

 

mplaksin0
Cirrus
Cirrus

Hello, i need more info about this. How to exclude specific URI from ASM scanning.