To block some specific traffic from F5 for specific virtual directory

when HTTP_REQUEST {
     Check the requested path set to lower case
    switch -glob [string tolower [HTTP::path]] {
        "/bac*" {
             Path started with /bac so check if client IP is in the allowed_hosts_dg data group
            if {not [matchclass [IP::client_addr] equals allowed_hosts_dg]}{
                 Send a 403 unauthorized response
                HTTP::respond 403 content {Blocked!}
                 Or you could reset the TCP connection
                reject
            }
        }
    }
}

when HTTP_REQUEST {
     Check the requested path set to lower case
    switch -glob [string tolower [HTTP::path]] {
        "/bac*" {
             Path started with /bac so check if client IP is in the allowed_hosts_dg data group
            if {not [matchclass [IP::client_addr] equals $::allowed_hosts_dg]}{
                 Send a 403 unauthorized response
                HTTP::respond 403 content {Blocked!}
                 Or you could reset the TCP connection
                reject
            }
        }
    }
}