For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

member123_60341's avatar
member123_60341
Icon for Nimbostratus rankNimbostratus
Jan 14, 2010

ASM - pool to be defined in http class or in VIP ?

Hi ,     We are having two LTMs running ASM. There are two virtual servers created one for 'http' and one for 'https' (for SSL offload).     1. When we are enabling ASM, do we ne...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 14, 2010
The way you have it configured is secure and fine.

 

 

However, there is no security risk with having a default pool on the VIP if you only have one HTTP class with ASM enabled and no filters on that class. If you add a pool to the HTTP class, that pool will be used (and the default pool would never be used).

 

 

The only downside to that approach is that the VIP status shows as unknown because TMM only checks the VIP's default pool's state.

 

 

Aaron