Automatic Signatures Updates from EM to ASM

Hi Nik,

 

 

here you go..

 

1) Do i download 10.2.4 ISO file in the shared/images of the EM box and then schedule it to be pushed ?

 

Ans) The 10.2.4 ISO file is the total BigIP package and used when you are upgrading your appliance. Not used for ASM signature updates.

 

 

2) Currently in the EM-->task List , i do see the daily update of attack signature (as its scheduled daily) but there are actually no updates hapening. Is it becasue there are no 10.2.4 updates download.

 

Ans) I believe, the task you are seeing is your enterprise manager communicating to F5 portal to see if there are any new signature updates that it can download. And as F5 do not release signatures very often, you are seeing that there are no updates.

 

 

3) Shouldnt EM be automatically downloading the 10.2.4 signatures and installing it in the ASMs.

 

Ans) No, the EM only downloads the new signature to the EM appliance. You have manually create a task to install them on the ASM appliances.

 

 

Hope this helps.

 

 

- Santosh.