Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

ASM allowed methods

ASM allowed methods are GET, HEADER, and PUT. Can somebody explain me in which case or why the HEADER method is set to Act As Method GET?
0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
ASM uses this definition when you configure an application flow model. It allows you to configure different parameters that are allowed on POST request VS. GET request (to the same URL). In this case, request using the HEAD method will be matched against the definition of the GET request (to a specific URL).
BTW - By default ASM allows only GET, POST and HEAD. ASM admin can add additional methods (in your case someone added the PUT method)
0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

Hi,

Starting from the base that the BIG-IP ASM policy allows the GET, HEAD and POST methods by default, you can configure additional methods that are initially considered illegal.

There are two main ways to do this:

The first and most recommended is to use the Automatic Policy Building template. Here you can learn at what point the application is using this method and enable it from the traffic learning screen.

The second option is to manually add the additional method (PUT) to your policy as follows:

Image Text

0
placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER
Hi John,

As Ido said, this setting means that HEAD requests are considered as GETs when validating the request method (and flows if you have flows defined in the policy). Feel free to email or call me if you have questions on this.

Aaron
-1
Comments on this Answer
Comment made 21-Aug-2017 by MSZ 472

Hi I would like to add the PUT method. which method I use to act as instead of PUT?

Best Wishes,

0
Comment made 22-Aug-2017 by John Wagnon

Hi MSZ, I wanted to clarify what you are asking. By default the ASM allows only GET, POST, and HEAD methods. Do you want to add the PUT method also so that ASM will allow it as well? Or, something else?

Thanks!

0
Comment made 22-Aug-2017 by MSZ 472

Yeah I want to add the PUT method as well.

I tried with default configuration to add the PUT HTTP Method: It was showing ACT AS METHOD (POST)

Will it work or not?

https://support.f5.com/csp/article/K12312

0