Can I direct the ASM Violation Response to an API instead of direct to the Client?

Question

Using either the ASM response pages or an iRule, is it possible to direct the response from the F5 to an API of my choice rather than replying directly to the client?&nbsp;
This would allow the Dev to work with the response and serve the client crafted content.&nbsp;
Thank you&nbsp;

kai_wilke · Answer

Hi Saidshow,&nbsp;
you could send a HTTP redirect to your clients which then connect the client to your API. This can be configured by either using the build-in ASM response pages settings or via iRules.&nbsp;
You may check out the guide below for further information...&nbsp;
https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/25.html&nbsp;
Cheers, Kai &nbsp;

Forum Discussion

Can I direct the ASM Violation Response to an API instead of direct to the Client?

1 Reply

Recent Discussions

BIG-IP DNS: Check Status Of Multiple Monitors Against Pool Member

Open Redirection Mitigation

F5Access | MacOS Sonoma

enable tls1.2 on management interface on F5 ltm running version 10.x

[ASM] - what is "Browser Challenge file" ?

Related Content

Introduction of Incident Response

custom response page for api

Return ASM Violation in Response

Rate limiting GraphQL API query using iRule and Advanced WAF Violation

Separating False Positives from Legitimate Violations