How do you install/use TCLSCAN to validate secure iRules?

Hi GC84-

This is the procedure I used:

1. Compile tclscan on a CentOS 7 box
2. Copy the iRules to the CentOS 7 device
3. Run the tclscan command against the iRules (e.g. tclscan iRuleDoubleSub.txt)

The tclscan toolkit should not be loaded on the F5.

I also used Burp Suite with the iRule extender loaded to test for double substitution issues.