Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Dec 20, 2013

Tighter security for one geolocation only?

Our website needs tighter security for one geolocation. I thought of creating a separate security policy with tighter restrictions for web scrapping and DoS for this geolocation.   Is the best w...
management
Pragathishakart's avatar
Pragathishakart
Icon for Nimbostratus rankNimbostratus
Dec 27, 2013

Hi, Please refer below. http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-1-0/asm_security_policy.html

 

  • Dianna_129659's avatar
    Dianna_129659
    Icon for Nimbostratus rankNimbostratus
    Dec 27, 2013
    Thank you. This should help guide me.
  • Dianna_129659's avatar
    Dianna_129659
    Icon for Nimbostratus rankNimbostratus
    Dec 27, 2013
    It was suggested that I write an iRule to use the "whereis country" command[1] to insert a header[2] into the request so that a HTTPClass can be used to change policies on that header. THern I would need to configure the HTTPClass to match on the header and configure the policy for Mexico on that HTTPClass, when I setup that HTTPClass first in the HTTPClass order on the virtual, it will catch Mexican requests and other requests will fall back to the other HTTPClass. Will this work with ASM version 11.3?