For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

member123_60341's avatar
member123_60341
Icon for Nimbostratus rankNimbostratus
Jan 14, 2010

ASM - pool to be defined in http class or in VIP ?

Hi ,     We are having two LTMs running ASM. There are two virtual servers created one for 'http' and one for 'https' (for SSL offload).     1. When we are enabling ASM, do we ne...
app sec
BIG-IP Access Policy Manager (APM)
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Oct 11, 2013

Wallace,

 

"Do I need to add ASM to each HTTPclass?" - depends really. The Http class profiles can distinguish the traffic based on Host name, URI etc and then enable ASM or not. They work in a top down order too and the first one it matches it uses. If you want all the traffic to be security enabled, notwithstanding the order config in the class then yes, you may have to enable it on every one.

 

Re irules and ASM see: https://devcentral.f5.com/wiki/iRules.asm.ashx

 

Hope this helps, N