Forum Discussion

NetworkTeam_178's avatar
NetworkTeam_178
Icon for Nimbostratus rankNimbostratus
Mar 13, 2015

AFM - Enable HTTP protocol security

Hi guys,

 

Just reading and testing AFM module and found chapter about HTTP Protocol Security and according to implementation guide to enable security on HTTP profile I should do as follow:

 

  1. On the Main tab, click Local Traffic > Profiles > Services > HTTP. The HTTP profile list screen opens.
  2. In the Name column, click http. The Properties screen for the system-supplied HTTP profile opens.
  3. Select the Protocol Security check box to enable HTTP security checks. This action associates the default HTTP security profile with the default HTTP service profile.
  4. Click Update.

there is only one problem I can't see this option in HTTP profile.

 

I have AFM license and i can see HTTP protocol security profile in Security->Protocol Security->Security Profiles->HTTP.

 

I tried also from command via TMSH but don't have option for "security" under HTTP profile.

 

Anyone know what can cause this ?

 

Regards, Marcin

 

2 Replies

  • Hi,

     

    What version of bigip and what version of the document are you seeing?

     

    I'm not expert, but:

     

    prior 11.4.1

     

    create ltm profile http my_http_security_profile defaults-from http security enabled

     

    11.5.0 and above

     

    create security http profile my_http_security_profile defaults-from http_security

     

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Create a http security profile in the GUI and then in the virtual server go to the Security tab and select the profile here.