Forum Discussion

Sharath413's avatar
Sharath413
Icon for Nimbostratus rankNimbostratus
Feb 04, 2021

How do I block a user access to a directory within my website?

I'm running ASM in 15.1.2. How do I block a user access to a directory within my website? For eg: I want to allow all URLs on my website but wp-content/uploads/testfolder/forms/* As shown above, I...
  • Enes_Afsin_Al's avatar
    Feb 04, 2021

    Hi Sharath413,

    Yes, you can use disallowed URLs policy for ASM.

    https://support.f5.com/csp/article/K29418033#p2

    Or iRule:

    when HTTP_REQUEST {
    	if { [HTTP::uri] starts_with "/wp-content/uploads/testfolder/forms/" && [IP::client_addr] ne "your_ip_address" } {
    		drop
    	}
    }