How to configure AWS f5 rules - Web ACL?

Question

The AWS web acl ux only has a number of pre-configured 'triggers' aka if it matches xss etc. What I don't understand is that if rules are to be 'globally' applied to all website (not just xss!) there is no selection on the web acl. &nbsp;
I can choose from 'a rule that matches xss', 'a rule that matches an ip' ... How do I make a rule that will cause the f5 waf to trigger?&nbsp;
Thomas&nbsp;

thomas_munn_366 · Accepted Answer

See my comment above. You just bypass the generic aws rules, and hit 'next' on the waf creation wizard. Then assign rules and you off to the races.&nbsp;

jeff_giroux_f5 · Answer

The last F5 Agility conference had a lab for F5 ruleset on AWS WAF. Take a look.

https://clouddocs.f5.com/training/community/public-cloud/html/class2/module3/module3.html

And quick demo video by an F5 Solutions Architect:

https://www.youtube.com/watch?v=UN2Mj3qbI_U

thomas_munn_366 · Answer

What I meant to say is how do I get the rules to apply globally to any reqeust not just ones that match xss or from a geographic region? Looks like I might just use a * for string match? &nbsp;

thomas_munn_366 · Answer

I called amazon. You just hit the 'next' button and bypass the web acl categories. Its on the 'next' page on the wizard. Then you use f5 managed rules and you are good to go.&nbsp;

boneyard · Answer

thanks for reporting back and sharing the answer.&nbsp;

Forum Discussion

How to configure AWS f5 rules - Web ACL?

5 Replies

Recent Discussions

iRule resulting in too many redirects

ASM cookie, modifying "domain" field

URL

service profile HTTP in LTM v16.1?

Azure SAML - F5 APM

Related Content

F5 Distributed Cloud Origin Server Subset Rules

Configuring BIG-IP AFM firewall policies and rules with Ansible

Protect your applications using F5’s Distributed Cloud and Fast ACL’s

LTM Cipher rule

BIG-IP BGP Routing Protocol Configuration And Use Cases