APM readiness

Dear Jimmy,

You should be fine with Sync-Failover Device Group.

Please refer to the below article.

Understanding Device Groups

Just Provision APM and start working on Access Policies..

Regards,

Mohammed Mukram

Yep . As long as you have a license and you provision it according to your requirement, you can start working on it.

Sync is a device level feature for fail over and wont impact your requirement here.

Just be aware that APM doesn't sync the same way as LTM. APM itself has no real concept of active/standby within the product or synching of sessions between devices. The APM sync is within APM (Called Policy Sync). It's not the same as the LTM device groups.

Normally I'd run 2 (Or more) APM's side by side active/active with non floating IP's for the VS's. That way they're up all the time (Running active standby is just an expensive way of having an idle APM unit that you have no idea works until you need it, and I've never actually run an APM policy on a floating VS :) ).

You just use the APM Policy sync then to keep the config synchronised between them.

Within the policy APM has device specific settings for various things like SecureID auth so you can have different configs used by each device even though you're syncing the configs...

For HA You can load-balance a service across the multiple APM's by using either GTM (My preference) or a front-end LTM VS that just redirects to a chosen APM VS by name (e.g. at random or selection by GeoIP etc)

H

Thanks to all replies!

By this time, we have also planned to upgrade our Active-Standby LTM appliances from 11.5 to 11.6 before activating APM. So, we are working on the reactivation of licences, and switching roles between the active and standby nodes during the OS upgrade, etc.

Would appreciate if the step-by-step procedure can be outlined.

Thanks, Jimmy

=-=-=