Forum Discussion

Dianna_129659's avatar
Dianna_129659
Icon for Nimbostratus rankNimbostratus
Dec 20, 2013

Tighter security for one geolocation only?

Our website needs tighter security for one geolocation. I thought of creating a separate security policy with tighter restrictions for web scrapping and DoS for this geolocation.

 

Is the best way to do this? If this is a good solution, can you guide me to where I can learn how to apply the new security policy to just the one geolocation, please? Many thanks in advance. p.s. I am very new at this.

 

management

4 Replies

Sort By
  • Pragathishakart's avatar
    Pragathishakart
    Icon for Nimbostratus rankNimbostratus
    Dec 27, 2013

    Hi, Please refer below. http://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-config-11-1-0/asm_security_policy.html

     

    • Dianna_129659's avatar
      Dianna_129659
      Icon for Nimbostratus rankNimbostratus
      Dec 27, 2013
      It was suggested that I write an iRule to use the "whereis country" command[1] to insert a header[2] into the request so that a HTTPClass can be used to change policies on that header. THern I would need to configure the HTTPClass to match on the header and configure the policy for Mexico on that HTTPClass, when I setup that HTTPClass first in the HTTPClass order on the virtual, it will catch Mexican requests and other requests will fall back to the other HTTPClass. Will this work with ASM version 11.3?