Forum Discussion
Wasfi_182818
Altostratus
AltostratusCan big IP EM feed the ASM signature updates to a group of ASM devices?
Hi
In a situation where a customer does not want the ASM to initiate a connection to the Internet, can the signature updates be obtained from an Enterprise Manager. If so, is this a push operati...
Yann_Desmarest_
Nacreous
NacreousHello,
Enterprise Manager has this feature. Here an extract from the Enterprise Manager configuration guide :
As new threats are discovered, F5 regularly updates Application Security Manager ASM attack signature files. You can configure Enterprise Manager to automatically check for, and download, newly updated ASM attack signature definitions for images stored in the image repository. This feature helps you avoid performing unnecessary and potentially frequent manual checks for updated ASM attack signature files.I saw this feature present on the product since 2.3.0
Yann_Desmarest_Nacreous
NacreousHi, In that configuration, Enterprise Manager push the ASM Signatures to bigip devices. You can schedule the task to automatically apply new and updated signatures.
