Forum Discussion

Reza_76713's avatar
Reza_76713
Icon for Nimbostratus rankNimbostratus
Mar 17, 2009

bypass ASM based on protocol usage

Hey guys,

 

 

How can I bypass ASM?

 

I have a server pool reached via http and Https protocols.

 

I will to enable ASM on http request and disable ASM on Https request.

 

 

What is the best possible solution here?

 

 

Thx
APM
app sec
security

2 Replies

Sort By
  • hooleylist's avatar
    hooleylist
    Icon for Cirrostratus rankCirrostratus
    Mar 17, 2009
    I think it would be simplest to configure two separate VIPs: one for HTTP with an ASM-enabled HTTP class and a second for HTTPS with no HTTP class. This would ensure that only HTTP requests are validated by ASM.

     

     

    Aaron