Forum Discussion

averma16_369349's avatar
averma16_369349
Icon for Nimbostratus rankNimbostratus
Aug 14, 2018

Block IP Address on Fly

What is the best way to block list of IP addresses. One could be use an iFile and using iRule, reject traffic matching ip addresses in that file. Another one could be using DataGroup and followin...
ASM Advanced WAF
iRules
security
Surgeon's avatar
Surgeon
Ret. Employee
Aug 14, 2018

you are not able to block IPs using iRules on the fly. Datagroup files need to be re uploaded every time you update it. It is better to look towards AFM if you require more intelligent behavior. Re-uploading datagroup file will cause mcpd to reload the config and may bump up CPU usage.