For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

emcd_145429's avatar
emcd_145429
Icon for Nimbostratus rankNimbostratus
Feb 25, 2014

ASM deployment time estimate

hi there, I'm looking to understand what kind of timeframe would you expect a new ASM deployment to take. I'm asking as we have vendor quoting us to implement a new installation of F5 boxes (cluster...
ASM Advanced WAF
deployment
security
Colin_Keltie's avatar
Colin_Keltie
Icon for Nimbostratus rankNimbostratus
Mar 10, 2014

If someone were to ask me if i could deploy an ASM policy in 2-3 weeks that I would have confidence would be tuned to actually protect the app correctly and not kill it for the users, I'd probably guess that it would be an insufficient timeframe. Even for a greenfield app and straight OOB ASM config. If it's a live app with existing users and you want to introduce ASM protection - 2 to 3 weeks is insufficient. I would have tended to estimate towards 8 weeks as a minimum. And if it turned into 2 to 3 years I'd be disappointed but not surprised.

 

(referring to Enterprise Class Corporate Transactional Apps)

 

Note, these comments are general. Just getting an ASM policy "working" takes minutes.