Forum Discussion

veredgf's avatar
veredgf
Icon for Nimbostratus rankNimbostratus
Jun 12, 2019

Disabling certain blocking policy element for specific URLs

We have a website where we need to bypass the illegal http response (500) for certain URLs.   The URLs are wildcards - i.e. \folder\folder\*   Any suggestions?  
ASM Advanced WAF
irule
iRules
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Jun 12, 2019

Not sure if this is the best solution, but this seems to work. Copy your policy and name it for example 'my_policy_allow_500'. In this policy, you will allow 500 as a valid response. So you have the policy 'my_policy' enabled on your virtual server. And select when needed the 'my_policy_allow_500' when needed.

when HTTP_REQUEST {
    if { [HTTP::uri] starts_with "/folder/folder/" } {
        ASM::enable /Common/my_policy_allow_500
    }
}

The disadvantage of this approach is that you have to maintain two policies. Hopefully someone comes up with a better solution 🙂

  • veredgf's avatar
    veredgf
    Icon for Nimbostratus rankNimbostratus
    Jun 13, 2019

    Hi, Thank you very much. This is indeed simple to create. I also agree that possibly there could be another solution, but if there isn't, this is a very useful solution.

     

    Thanks!