# \#unblock **URL:** https://community.f5.com/tag/unblock/508.md [Latest](https://community.f5.com/latest.md) · [Categories](https://community.f5.com/categories.md) · [Tags](https://community.f5.com/tags.md) --- ## [Unblock Request WAF](https://community.f5.com/t/unblock-request-waf/76782)
**Author:** [@Stan\_Marsh](https://community.f5.com/u/Stan_Marsh)\ **Replies:** 4\ **Last updated:** [December 24, 2025, 5:09pm UTC](https://community.f5.com/t/unblock-request-waf/76782 "2025-12-24T17:09:08Z")
Hello Everyone I hope Youre well!!! I have a policy created in WAF, and I have this request URL; however, it needs to be valid, yet the WAF blocks it and flags it as a level 3 triggered violation. How can I exempt… --- ## [About shun list for L7 DDoS?](https://community.f5.com/t/about-shun-list-for-l7-ddos/74342)
**Author:** [@SanYang](https://community.f5.com/u/SanYang)\ **Replies:** 2\ **Last updated:** [January 15, 2025, 9:50pm UTC](https://community.f5.com/t/about-shun-list-for-l7-ddos/74342 "2025-01-15T21:50:41Z")
Hello everyone, I’m having some problems setting up my L7 DDoS settings. I can successfully run the L7 DDoS defense against source IP in the settings. According to the article linked below, when detected by F5 L… --- ## [Windows PowerShell "cp" execution attempt (Parameter)](https://community.f5.com/t/windows-powershell-cp-execution-attempt-parameter/74802)
**Author:** [@AARM00502](https://community.f5.com/u/AARM00502)\ **Replies:** 4\ **Last updated:** [July 25, 2024, 12:39am UTC](https://community.f5.com/t/windows-powershell-cp-execution-attempt-parameter/74802 "2024-07-25T00:39:24Z")
Hello everyone. In a security policy I am alarmed by an attack signature due to the detection of “cp”, this identifies it as a command, however, it is part of the character string that is used to fill out a form on our w… --- ## [Can iRule forward request to pool after ASM block without ASM:unblock ?](https://community.f5.com/t/can-irule-forward-request-to-pool-after-asm-block-without-asm-unblock/74537)
**Author:** [@SanYang](https://community.f5.com/u/SanYang)\ **Replies:** 2\ **Last updated:** [May 23, 2024, 4:19pm UTC](https://community.f5.com/t/can-irule-forward-request-to-pool-after-asm-block-without-asm-unblock/74537 "2024-05-23T16:19:18Z")
Hello expert, I have written an iRule that when blocked forwards to other pools without any problems. It is done ! when ASM\_REQUEST\_DONE { if { \[ASM::status\] equals "blocked" } { ASM::unblock … --- ## [Get associated pool name from VIP IP using F5-LTM](https://community.f5.com/t/get-associated-pool-name-from-vip-ip-using-f5-ltm/74366)
**Author:** [@Snehasish](https://community.f5.com/u/Snehasish)\ **Replies:** 0\ **Last updated:** [April 18, 2024, 3:50pm UTC](https://community.f5.com/t/get-associated-pool-name-from-vip-ip-using-f5-ltm/74366 "2024-04-18T15:50:59Z")
I am trying to get the pool name from the VIP IP which I am getting from a input file, but I am unable to get any cmdlet related to that \`\`\` $secpasswd = ConvertTo-SecureString “” -AsPlainText -Force $MyLTM\_IP = “12.1… --- ## [allow one url from blocks geolocation](https://community.f5.com/t/allow-one-url-from-blocks-geolocation/73395)
**Author:** [@Mohamedabogamil](https://community.f5.com/u/Mohamedabogamil)\ **Replies:** 4\ **Last updated:** [November 6, 2023, 10:38am UTC](https://community.f5.com/t/allow-one-url-from-blocks-geolocation/73395 "2023-11-06T10:38:50Z")
i have published service from waf and i block urls on all country except KSA and i have one url allowed from aruba i used below i rule but its didn’t work hen HTTP\_REQUEST { if { (\[string tolower \[HTTP::uri\]\] eq “GET … --- ## [ASM::unblock not working for specific violation](https://community.f5.com/t/asm-unblock-not-working-for-specific-violation/73368)
**Author:** [@F5Audiolomb](https://community.f5.com/u/F5Audiolomb)\ **Replies:** 6\ **Last updated:** [November 1, 2023, 2:18pm UTC](https://community.f5.com/t/asm-unblock-not-working-for-specific-violation/73368 "2023-11-01T14:18:05Z")
Hello there, I set an iRule for ASM that should unblock a specific violation: when ASM\_REQUEST\_DONE { set asm\_support\_id \[ASM::support\_id\] if { $uri starts\_with "/my/uri" and \[ASM::violation names\] contains "… --- ## [Exception for GeoBlocked Country. Without Allow-Listing a specific IP](https://community.f5.com/t/exception-for-geoblocked-country-without-allow-listing-a-specific-ip/73333)
**Author:** [@dbaimakov](https://community.f5.com/u/dbaimakov)\ **Replies:** 2\ **Last updated:** [October 23, 2023, 8:07pm UTC](https://community.f5.com/t/exception-for-geoblocked-country-without-allow-listing-a-specific-ip/73333 "2023-10-23T20:07:47Z")
We are geo-blocking users from China, but some users are trying to ship goods and needs to see access certain guidelines regarding the types of goods that are allowed. The security policy that governs access to this app… --- ## [ASM irule to disable attack signature authorization header with specific value](https://community.f5.com/t/asm-irule-to-disable-attack-signature-authorization-header-with-specific-value/72082)
**Author:** [@f5learner](https://community.f5.com/u/f5learner)\ **Replies:** 10\ **Last updated:** [April 25, 2023, 6:07pm UTC](https://community.f5.com/t/asm-irule-to-disable-attack-signature-authorization-header-with-specific-value/72082 "2023-04-25T18:07:27Z")
hello is there an irule to DISABLE ASM attack signature on the Authorization header if value contains “Bearer” but still check attack signature on rest of the payload --- ## [CMS causing False Positives](https://community.f5.com/t/cms-causing-false-positives/72167)
**Author:** [@snoonanCLG](https://community.f5.com/u/snoonanCLG)\ **Replies:** 1\ **Last updated:** [April 19, 2023, 11:50am UTC](https://community.f5.com/t/cms-causing-false-positives/72167 "2023-04-19T11:50:47Z")
Hello, I am recently seeing many false positives relating to CMS (Kentico EMS) on one of my F5 ASM policies. As it is CMS and marketing department would be editing web sites etc. we are seeing many requests being blo… --- ## [Generating irule logs, emails and reports for Shadow API Endpoints on the F5 BIG-IP AWAF/ASM device](https://community.f5.com/t/generating-irule-logs-emails-and-reports-for-shadow-api-endpoints-on-the-f5-big-ip-awaf-asm-device/72169)
**Author:** [@Nikoolayy1](https://community.f5.com/u/Nikoolayy1)\ **Replies:** 0\ **Last updated:** [April 18, 2023, 8:06pm UTC](https://community.f5.com/t/generating-irule-logs-emails-and-reports-for-shadow-api-endpoints-on-the-f5-big-ip-awaf-asm-device/72169 "2023-04-18T20:06:32Z")
Nowadays the F5 XC Distributed Cloud is all the rage for shadow API discovery and schema learning as seen in Enable API Endpoint Discovery and Schema Learning | F5 Distributed Cloud Technical Knowledge and for a good rea… --- ## [iRule to allow HTTP Error code through ASM policy](https://community.f5.com/t/irule-to-allow-http-error-code-through-asm-policy/46332)
**Author:** [@Chris\_Baiocchet](https://community.f5.com/u/Chris_Baiocchet)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 10:55am UTC](https://community.f5.com/t/irule-to-allow-http-error-code-through-asm-policy/46332 "2020-10-12T10:55:58Z")
Hello, I have an ASM policy applied to a virtual server. The ASM policy is configured to block HTTP 500 response codes. I would like to write an irule that would allow HTTP 500 to be returned to clients that are in a… --- ## [Turn off File type check for a specific URL](https://community.f5.com/t/turn-off-file-type-check-for-a-specific-url/13714)
**Author:** [@saidshow\_251381](https://community.f5.com/u/saidshow_251381)\ **Replies:** 6\ **Last updated:** [June 8, 2020, 9:10am UTC](https://community.f5.com/t/turn-off-file-type-check-for-a-specific-url/13714 "2020-06-08T09:10:19Z")
Hi, we have some dynamic urls that from time to time will include a fullstop. Is is possible to disable only the illegal file type check for uris that start with “/foo/foo1/”? I would not want to disable ASM entirely, ju… --- ## [How can I skip ONLY Geolocation within ASM\_REQUEST\_VIOLATION if there is more than one Violation?](https://community.f5.com/t/how-can-i-skip-only-geolocation-within-asm-request-violation-if-there-is-more-than-one-violation/53358)
**Author:** [@andrewbytes](https://community.f5.com/u/andrewbytes)\ **Replies:** 1\ **Last updated:** [August 1, 2019, 6:41pm UTC](https://community.f5.com/t/how-can-i-skip-only-geolocation-within-asm-request-violation-if-there-is-more-than-one-violation/53358 "2019-08-01T18:41:23Z")
So far; This WORKS; when ASM\_REQUEST\_VIOLATION { if { \[ASM::status\] eq “blocked” } { if { \[class match \[IP::client\_addr\] equals WHITELIST\] && \[ASM::violation names\] equals “VIOLATION\_ILLEGAL\_GEOLOCATION”}{ log loc… --- ## [ASM: "Illegal Request"](https://community.f5.com/t/asm-illegal-request/48932)
**Author:** [@JG](https://community.f5.com/u/JG)\ **Replies:** 3\ **Last updated:** [January 23, 2019, 12:53am UTC](https://community.f5.com/t/asm-illegal-request/48932 "2019-01-23T00:53:22Z")
I have come across a weird problem. A user access was blocked, with a support ID displayed. After searching the event log withe the support ID, I found that there was no learning suggestion for the access request, and I … --- ## [asm irule to unblock upon violation based on type](https://community.f5.com/t/asm-irule-to-unblock-upon-violation-based-on-type/42471)
**Author:** [@ErkkiS\_295148](https://community.f5.com/u/ErkkiS_295148)\ **Replies:** 1\ **Last updated:** [April 4, 2018, 12:55pm UTC](https://community.f5.com/t/asm-irule-to-unblock-upon-violation-based-on-type/42471 "2018-04-04T12:55:11Z")
Hello, I created a custom attack signature to block access to WSDL and sets Attack Type to “Information Leakage”. Works fine and blocks stuff. blabla.com/ws/test?wsdl gets blocked. Now I needed it unblocked for cer… --- ## [ASM disable violations alarm just for specific requests](https://community.f5.com/t/asm-disable-violations-alarm-just-for-specific-requests/41121)
**Author:** [@Muhannad\_64809](https://community.f5.com/u/Muhannad_64809)\ **Replies:** 2\ **Last updated:** [April 18, 2017, 12:12pm UTC](https://community.f5.com/t/asm-disable-violations-alarm-just-for-specific-requests/41121 "2017-04-18T12:12:38Z")
Dear Team, During creation and fine-tuning of an ASM-policy (based on manually), i have a URL response that keep triggering an RFC compliance check. it is an auto sync process running between servers. We need the A… --- ## [How could I exclude Vulnerability scanners from Session Tracking?](https://community.f5.com/t/how-could-i-exclude-vulnerability-scanners-from-session-tracking/4572)
**Author:** [@uknoodler\_23999](https://community.f5.com/u/uknoodler_23999)\ **Replies:** 6\ **Last updated:** [March 9, 2017, 5:50pm UTC](https://community.f5.com/t/how-could-i-exclude-vulnerability-scanners-from-session-tracking/4572 "2017-03-09T17:50:29Z")
I have enabled session tracking on an application and it has quickly blocked my vulnerability scanner. Of course this is “scan interference” and makes the results invalid. The options on the IP Address Exceptions page a… --- ## [ASM issue, need to return HTTP 500 to client in certain cases](https://community.f5.com/t/asm-issue-need-to-return-http-500-to-client-in-certain-cases/39988)
**Author:** [@James\_Betts\_290](https://community.f5.com/u/James_Betts_290)\ **Replies:** 6\ **Last updated:** [October 19, 2016, 11:25pm UTC](https://community.f5.com/t/asm-issue-need-to-return-http-500-to-client-in-certain-cases/39988 "2016-10-19T23:25:12Z")
I’ve written a script that captures the “Content-Type” header from requests. In the event that ASM blocks the request, I need to respond to the client with one of three types of responses (I’m using the ASM\_REQUEST\_BLOCK… --- ## [Blocking Traffic from Single IP with block page on ASM](https://community.f5.com/t/blocking-traffic-from-single-ip-with-block-page-on-asm/39183)
**Author:** [@Techgeeeg\_28888](https://community.f5.com/u/Techgeeeg_28888)\ **Replies:** 5\ **Last updated:** [August 8, 2015, 11:29am UTC](https://community.f5.com/t/blocking-traffic-from-single-ip-with-block-page-on-asm/39183 "2015-08-08T11:29:30Z")
Hi Everyone, I would like to have the experts input on a point, I have ASM running where I want to block the requests from a particular source IP address and the violation page with id should be returned. How can I do…