We need to block a several subnets for a particular virtual server. Is the best way to use an iRule? And can you please send me an example of an iRule we can use?
log local0.  "client IP: [IP::client_addr] - discarded"
To use a datagroup makes it easy to manage, whenever you want to add an IP subnet or delete an IP subnet, you can do it easily without touching to the iRule.
Thank you for your response. Is there a way to achieve this with out using a data group?
Note : switch command does not support network with netmask comparaison.
So how would and iRule look if I wanted to block several specific IP's?
Should this work when applied to a specific VS?