Forum Discussion
AliCanS
Nimbostratus
NimbostratusiRule newbie - Whitelisting IP address for Spesific URL and Attack Pattern
Hello community, One of our third party applications have false-positive blocks for spesific attack pattern, which we want to whitelist, but as our f5 support explained that it cannot be done to ...
AubreyKingF5
Moderator
ModeratorI think it can be done, but not w/ an ASM irule. I can't write this now, as I'm sick and on quick, but the idea is to take the asm policy off the vip, then use an irule like this:
- when http_request, check URI.
- if uri matches [list of disallowed uris], exit the irule.
- else, if no match, apply ASM policy.
I am going to tell you, though.. depending on traffic levels, this could get computationally expensive.
