Forum Discussion

Justine_313324's avatar
Justine_313324
Icon for Altostratus rankAltostratus
Jul 23, 2018

ASM deployment queries

Hi All,

 

Basically I need some advice and information since I have some doubts and new to this device. I decided to deploy the ASM as one-arm since we are not ready yet to do some changes on our network infrastructure and the soul purpose of the deployment is to test the module "ASM".

 

  1. Regarding on the VLAN, which VLAN will it be and should it be on the same VLAN as my web server?
  2. I'm going to use the rapid-deployment policy, will the log appears on the event logs:application:request? With this do I need a X-forward-for profile?
  3. Since it will be in transparent mode, will the 1-arm deployment applicable for ASM?

Objectives 1. Deploy the ASM and using the rapid-deployment policy

 

Thank you!

 

application delivery
ASM Advanced WAF
security
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Jul 26, 2018

    Justine, ASM won't care about the mode of deployment per se, as long as the VIP works and the traffic to VIP and then to Pool Member works too. You only need XFF if you SNAT the traffic, which you probably will in one-arm. Only other requirement is the VIP needs a HTTP profile.

     

    Hope this helps,

     

    N

     

  • Jhaunu_Gupta's avatar
    Jhaunu_Gupta
    Icon for Nimbostratus rankNimbostratus
    Jul 30, 2018

    it doesn't based on vlan or profile. ASM is specific to virtual server,F5 licence should contain ASM licence.so enable the ASM module in resource provisioning. and create your own ASM policy and assign to virual server.