For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
May 28, 2015

ASM staging in Transparent and Blocking - what is difference

Hi,   I was reading some post related to this subject but I am still not sure if I got it right. So here it is:   Scenario 1   Enforcement Mode: Transparent Enforcement Readiness Period: 7...
ASM Advanced WAF
deployment
design
management
security
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
May 29, 2015

BTW, based on your production experience which way of creating policy is most convenient for building policy when more advanced setup is necessary - Rapid Deployment Policy and then manual tweaking or starting from the begging with Real Traffic Policy Builder and then fine tuning based on collected data?

 

I know that there is no single answer for every configuration but probably there are ways that are used more often than other, or maybe you can share some hints when to use one way and when another?

 

Piotr

 

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    May 29, 2015
    Starting with Policy Builder is the best practice. There is much less administrative overhead that comes with learning everything manually. Even if the PB is used you still have the option of manual configuration and fine tuning. Try searching Devcentral using the phrase "asm policy best practice". There are many threads discussing various approaches.
  • dragonflymr's avatar
    dragonflymr
    Icon for Cirrostratus rankCirrostratus
    May 29, 2015
    I will, I am just compiling my own docs based on all interesting post I can find on the forum. Seems to be much better and faster way to gain knowledge than reading docs prepared by F5 - I am not saying those are bad but written in such complicated way that without trying everything in lab it's hard to figure out how things are really working :-( Next step will be doing practical exercises using my lab setup - which is getting more and more complicated over time :-) Still resolving issues I am creating myself is in my opinion best way to really gain deep understanding of the product. Piotr