Forum Discussion
Marcus_Spitzmil
Nimbostratus
NimbostratusASM and TCP based applications
Hello, I am not an F5 expert, but am asking on behalf of a customer. I am trying to find the following:
Can ASM be leveraged to inspect application traffic when the application is using a TCP (...
Hello,
ASM is a Web application firewall and is dedicated to the protection of web apps.
You can use the ASM license to protect smtp and ftp services.
If you have a custom TCP app, you have better to go with LTM, irules and IP Intelligence (ip reputation db)
You can find info on devcebtral and askf5.f5.com
Yann_Desmarest_
Nacreous
NacreousHello,
ASM is a Web application firewall and is dedicated to the protection of web apps.
You can use the ASM license to protect smtp and ftp services.
If you have a custom TCP app, you have better to go with LTM, irules and IP Intelligence (ip reputation db)
You can find info on devcebtral and askf5.f5.com
Marcus_SpitzmilThanks a lot for the quick response. In this case it actually is a web app using websockets, which require a TCP based access policy. I am assuming this does not change your answer? Please confirm, then I'll mark your answer. Thanks! Marcus- The upcoming ASM v12.1 supports WebSocket applications. The standard TCP profile must be used on the virtual server, and then you add a WebSocket profile. Automatic configuration of WebSocket URLs is also configurable.
- Yann_Desmarest_Hi, Websocket is currently supported using LTM only. As Erik mentioned, you need to wait for the 12.1.0 to be released
- Marcus_SpitzmilMany thanks!
MSZwe are using v13.0 How do we configure the policy? And what is required from LTM side?
