Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Jul 29, 2019

Security issue - Oracle Identity System Administration login screen is exposed to public

Hi to all,   I have a cluster with 2 Big-IP VM ver13.1 .A VS has the role to load balanced OAM.I discovered that the Oracle Identity System Administration login screen is exposed to public.I foun...
BIG-IP
iRules
security
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jul 29, 2019

Hi

No, just combine the networks with a logical OR.

If the number of networks starts to get too unwieldy or you want to edit the networks regularly then you could use a Data Group to do a lookup

when HTTP_REQUEST {
	if { [string tolower [HTTP::uri]] starts_with "/restricted-uri" }{
	if { not ( [IP::addr [IP::client_addr] equals 192.168.0.0/16]) || ( [IP::addr [IP::client_addr] equals 10.0.0.0/8])} {
		drop
		}
	}
}