For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rezgui_180607's avatar
rezgui_180607
Icon for Nimbostratus rankNimbostratus
May 13, 2016

about the module AsM

Dear all, i have F5 2200 LTM, iwould like to know if i activate the module AMS how many percent can reduce teh perfermance of the f5 ltm?   who have some statistic about the consumption for the mo...
ASM Advanced WAF
devops
security
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
May 13, 2016

The use of ASM module will not handicap performance of LTM module. What will be affected is the overall performance of your application (page load time). As a rule of thumb, expect at least 15% increase in page load times due to ASM security-checks. If you use poorly configured policies (i.e. apply 'All Signatures', and enable all blocking settings that some do), this performance loss will be greater.

 

2200s Appliance only has 8GB memory, but with optimized configurations, you can pull off LTM + ASM in low-activity environments. To make a judgement call if you can provision ASM without taking great capacity risks, have a look at your performance graphs. What is your current CPU and Memory usage during peak-activity hours?

 

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    May 13, 2016
    Another point: If you use ASM, send the request/blocking logs to external Syslog server. Any kind of on-appliance logging should be avoided.