Forum Discussion
NimbostratusASM: changing hostname for whitelisted URL's
Hi,
We have ASM policy already in place for site-X.mycompany.com, we have site-Y that hosts the same application but with a different hostname site-Y.mycompany.com
Is there a way to export the ASM policy of site x and change the hostname for the URL's and apply it on site-Y, or I need to build a new policy ?
If this is doable, anything else I need to modify besides URL's hostname ?
4 Replies
Hannes_Rapp_162Nacreous
You can export, and re-use
The reason for that is if you take a closer look at the meaning of "URL", in BigIP ASM it's really an equivalent to HTTP Path. This means your allowed/disallowed URL definitions are guaranteed to continue working after a DNS update.
- From the perspective of 'Illegal URL' violation, it doesn't make any slight difference if you update DNS from
tofoo.bar.com
.bar.foo.com
Here's another example:
- True URL:
https://devcentral.f5.com/questions - BigIP ASM URL:
/questions
- Hannes_Rapp_162
Assuming your case weren't so simple, you could always export the policy as XML, and do a 'search & replace all' on the file. Once done, you just import the modified XML as a new policy. Good luck!
- From the perspective of 'Illegal URL' violation, it doesn't make any slight difference if you update DNS from
Hannes_RappYou can export, and re-use
The reason for that is if you take a closer look at the meaning of "URL", in BigIP ASM it's really an equivalent to HTTP Path. This means your allowed/disallowed URL definitions are guaranteed to continue working after a DNS update.
- From the perspective of 'Illegal URL' violation, it doesn't make any slight difference if you update DNS from
tofoo.bar.com
.bar.foo.com
Here's another example:
- True URL:
https://devcentral.f5.com/questions - BigIP ASM URL:
/questions
- Hannes_Rapp
Assuming your case weren't so simple, you could always export the policy as XML, and do a 'search & replace all' on the file. Once done, you just import the modified XML as a new policy. Good luck!
- From the perspective of 'Illegal URL' violation, it doesn't make any slight difference if you update DNS from
