For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_182818's avatar
Wasfi_182818
Icon for Altostratus rankAltostratus
Apr 19, 2016

Can big IP EM feed the ASM signature updates to a group of ASM devices?

Hi   In a situation where a customer does not want the ASM to initiate a connection to the Internet, can the signature updates be obtained from an Enterprise Manager. If so, is this a push operati...
ASM Advanced WAF
security
Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 13, 2016

Hello,

Enterprise Manager has this feature. Here an extract from the Enterprise Manager configuration guide : 

As new threats are discovered, F5 regularly updates Application Security Manager ASM attack signature files. You can configure Enterprise Manager to automatically check for, and download, newly updated ASM attack signature definitions for images stored in the image repository. This feature helps you avoid performing unnecessary and potentially frequent manual checks for updated ASM attack signature files.

I saw this feature present on the product since 2.3.0

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 31, 2016
    Hi, In that configuration, Enterprise Manager push the ASM Signatures to bigip devices. You can schedule the task to automatically apply new and updated signatures.