Need advise to setup a policy on F5

Question

We have a virtual server 172.16.0.180&nbsp; configured&nbsp; with port 443 .&nbsp;The pool is Netforumuat_PL_443 which has 4 members&nbsp;10.103.51.105 : 44310.103.51.106: 44310.103.51.107: 44310.103.51.108 : 443&nbsp;Requirementwe need a policy to be setup in F5 which can provide access to below URLs and reject other .&nbsp;https://partnersuat.rotary.org/xwebBrazilWeb/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebbadge/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebacquia/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebclubrunner/secure/netforumxml.asmxhttps://partnersuat.rotary.org/xwebcluxprs/secure/netforumxml.asmx&nbsp;Could someone assist herein. Thankyou&nbsp;&nbsp;

f5_design_engineer · Answer

Hi Samit,
&nbsp;
Please refer the following article , and setup a basic policy and use the condition type as follows:https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-management-getting-started-with-policies/introducing-local-traffic-policies.html
&nbsp;

HTTP Host
Matches the host of an HTTP request.

host. Matches the host name.
port. Matches the port number.
full string. Matches the full host header string.

&nbsp;
Use the full string option 5 times to add all your 5 URL and then select the appropriate action and assign it to the desired virtual server IP = &nbsp;172.16.0.180
https://partnersuat.rotary.org/xwebBrazilWeb/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebbadge/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebacquia/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebclubrunner/secure/netforumxml.asmx
https://partnersuat.rotary.org/xwebcluxprs/secure/netforumxml.asmx
https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-local-traffic-management-getting-started-with-policies/introducing-local-traffic-policies.html
HTH🙏

&nbsp;

samitjadhav · Answer

Hi F5_Design_engineer,Thanks for the update. I have created the policy as attached. could you please verify if its ok .&nbsp;just wondering that the traffic will be https but I have selected http host according to your advise.&nbsp;&nbsp;Regards&nbsp;Samit&nbsp;

Forum Discussion

Need advise to setup a policy on F5

2 Replies

Recent Discussions

Rundeck ansible F5 errors

What is the meaning is 52% block in WAF

rewrite Azure AD response for portal access via web portal

AS3 Monitoring multiple ports selectively

Open Redirection Mitigation

Related Content

Auditing Security Policy Updates

Minimizing Security Complexity: Managing Distributed WAF Policies

Looking for Setup Advice

How to Setup Shape Log Analysis in Fastly

Access policy, LTM policy and iRules