Manual Chapter : Adding a URL branching rule

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 17.1.0, 17.0.0, 16.1.5, 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0, 15.1.10, 15.1.9
Manual Chapter

Adding a URL branching rule

You must have a per-request policy.
Add a URL branching rule to provide branching for different URLs to allow different authentication methods.
  1. From the Main tab, click
    Access
    Profiles / Policies
    Per-Request Policies
    .
  2. Find the policy you want to edit, and in the Per-Request Policy column, click
    Edit
    .
  3. Add a URL branching rule by clicking the plus symbol, then the Classification tab, then selecting URL Branching. Click
    Add Item
    .
  4. Click the Branch Rules tab.
  5. In the
    Name
    field, type the name of the branch for MFA. For example,
    admin
    .
  6. Next to
    Expression: URL contains: domain.com
    , click
    Change
    .
  7. In the
    URL contains
    field, type the URL for users who are required to use MFA. For example,
    https://app.example.com/admin/*
    .
    Rules are evaluated in order, so specify the most specific rule first. In this example, we specify the
    <url>/admin/*
    rule first, because this URL requires MFA, and it is more specific than the next rule,
    <url>/*
    . If we specified the less specific rule first, all traffic would be sent to primary authentication, and MFA would not be used.
  8. Click
    Finished
    .
  9. From
    Insert Before
    , select
    fallback
    , then click
    Add Branch Rule
    .
  10. In the
    Name
    field, type the name of the branch that does not use MFA. For example,
    non-admin
    .
  11. Next to
    Expression: Empty
    click
    change
    .
  12. Click
    Add Expression
    .
  13. From
    Condition
    , select
    Substring
    .
  14. In the
    URL contains
    field, type the URL to match for all other non-MFA traffic. For example,
    https://app.example.com/*
    .
    You are not required to use
    substring
    as the condition when specifying a URL. You can use
    equals
    for an exact match,
    prefix
    or
    suffix
    for prefix or suffix matching, or
    glob
    for glob matching.
  15. Click
    Finished
    .
    This is an example of the URL Branching access policy item configured to branch for MFA and non-MFA authentication.