For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

member123_60341's avatar
member123_60341
Icon for Nimbostratus rankNimbostratus
Jan 14, 2010

ASM - pool to be defined in http class or in VIP ?

Hi ,     We are having two LTMs running ASM. There are two virtual servers created one for 'http' and one for 'https' (for SSL offload).     1. When we are enabling ASM, do we ne...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 14, 2010
If you're redirecting HTTP to HTTPS you can use a simple iRule or an HTTP class without ASM enabled. The action on the class would be redirect to https://[HTTP::host][HTTP::uri]. You would not want or need to add a pool to this VIP or class as it would never be used.

 

 

For the HTTPS VIP, you could add a single HTTP class with ASM enabled and no filters. Add the pool to the VIP--not the HTTP class. As long as you have no filters enabled on the class, all requests will go to ASM and then the VIP's default pool (assuming the request isn't blocked by ASM).

 

 

Aaron