bfm
Nimbostratus
NimbostratusSolved
F5 AWAF - bypass request based on the pressence of a request header - value
Hello,
We work with a service provider that need to automatically perform requests to our website. However this request has some values that triggers waf signatures. We would like to bypass those request based on a specific header-value (that we agreed with the service provider) presence on the request.
I assume it can be done by an irule, but, we try to avoid abusing of irules, so is there any other way we can do it?
Thank you
The irules are the way to go. Only for HTTP headers that have an ip addresses like X-Forwarded-For / Real Client IP you can make the WAF policy to use the ip address in the header and bypass the WAF by using the trusted IP addresses option.
