For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sebastiansierra's avatar
Sebastiansierra
Icon for MVP rankMVP
Feb 23, 2023

Case of use of AWAF to protect APM

Hi Community, Today I would like to open this post to talk about the use of AWAF to protect APM, I know some cases of use for this integration but I would like to receive some suggestions based on ...
application delivery
PSFletchTheTek's avatar
PSFletchTheTek
Icon for Cumulonimbus rankCumulonimbus
Feb 23, 2023

I've also wondered this, I'm sure there is a very good reason to put APM infront of ASM/AWAF but you do loose a level of protection or visability on that apm webtop.

Could the process be swopped? AWAF then APM?
Or maybe a AWAF plug in for APM which can feed information back to the APM module to give you both levels of protection?

Sebastiansierra's avatar
Sebastiansierra
Icon for MVP rankMVP
Feb 23, 2023

Hi PSFletchTheTek,

Yes, we can modify the behavior to process the first ASM module with a Virtual Server Layer and execute protections tan can be applied when the APM is executed first as brute force protection.