Forum Discussion
Kevin_Stewart
Sep 03, 2018Employee
Im thinking a switch would be easiest:
when HTTP_REQUEST {
switch -glob [string tolower [HTTP::host][HTTP::uri]] {
"11.11.103.139/uii/*" -
"usd-msp10.inf.us.cvr.com/websso/*" {
log local0. "[HTTP::host][HTTP::uri] allowed"
}
default {
log local0. "[HTTP::host][HTTP::uri] blocked"
reject (or drop, or HTTP redirect, or HTTP respond)
}
}
}
You could also do this with a CPM local traffic policy, which would probably be a little faster.