Forum Discussion

F5_Jeff's avatar
F5_Jeff
Icon for Cirrus rankCirrus
Jan 13, 2017

Allow specific IP to access link using ASM

Hi Everyone.   We want to allow specific IPs to access a link and block other IPs. Is there a way to do this in F5 ASM?   Is this achievable using the IP address exceptions?   Thank you for ...
application delivery
ASM Advanced WAF
security
samstep's avatar
samstep
Icon for Cirrocumulus rankCirrocumulus
Jan 23, 2017

I assume that by "a link" you are talking about a web application already behind F5 LTM/ASM and not an external link like "facebook.com".

 

If "a link" if a web application behind BIG-IP then the answer is - yes, it can be done, but it is a massive overkill if it is ALL you want to do. It is like hitting a nail into the wall with a bulldozer :)

 

If access by specific IPs is all you need then the simplest thing to use is a traditional firewall or AFM. ASM is there to protect Web Applications from hacker attacks, not to act as an IP packet filter :)