Forum Discussion
SanjayP
Nacreous
You can attach iRule to HTTP VIP to reject the traffic coming from the scanning tool.
Using data-group
when CLIENT_ACCEPTED {
if { [class match [IP::client_addr] equals scanner_ip] } {
reject
} else {
return
}
}
Using IP-address within the iRule
when CLIENT_ACCEPTED {
if { [IP::addr [IP::client_addr] equals <scannerip> ] } {
reject
} else {
return
}
}