Forum Discussion
Wasfi_182818
Altostratus
AltostratusCan big IP EM feed the ASM signature updates to a group of ASM devices?
Hi
In a situation where a customer does not want the ASM to initiate a connection to the Internet, can the signature updates be obtained from an Enterprise Manager. If so, is this a push operation by the EM or a pull operation by the ASM?
Kindly Wasfi
4 Replies
Yann_Desmarest_Nacreous
Hello,
Enterprise Manager has this feature. Here an extract from the Enterprise Manager configuration guide :
As new threats are discovered, F5 regularly updates Application Security Manager ASM attack signature files. You can configure Enterprise Manager to automatically check for, and download, newly updated ASM attack signature definitions for images stored in the image repository. This feature helps you avoid performing unnecessary and potentially frequent manual checks for updated ASM attack signature files.I saw this feature present on the product since 2.3.0
- Yann_Desmarest_Hi, In that configuration, Enterprise Manager push the ASM Signatures to bigip devices. You can schedule the task to automatically apply new and updated signatures.
Yann_DesmarestCirrus
Hello,
Enterprise Manager has this feature. Here an extract from the Enterprise Manager configuration guide :
As new threats are discovered, F5 regularly updates Application Security Manager ASM attack signature files. You can configure Enterprise Manager to automatically check for, and download, newly updated ASM attack signature definitions for images stored in the image repository. This feature helps you avoid performing unnecessary and potentially frequent manual checks for updated ASM attack signature files.I saw this feature present on the product since 2.3.0
- Yann_DesmarestHi, In that configuration, Enterprise Manager push the ASM Signatures to bigip devices. You can schedule the task to automatically apply new and updated signatures.
