CLI for ASM (10.0)

Hi Mike,

 

 

The ASM configuration is stored in an internal MySQL database. There isn't much of anything you can do via the command line. There is some functionality exposed in the iControl API for ASM, but not much at the policy level.

 

 

What are you trying to do?

 

 

Aaron

Thanks for your reply! There are a plenty of clients (>100) I need to construct application security policies in auto mode either to change dynamically those policies as soon as pools and ip-addresses in LTM has been configured and etc.

 

As far as I'm concerned CLI for ASM is planned in 10.1

That might be true, but the current 10.1 beta doesn't describe any new CLI or iControl functionality for ASM.

 

 

 

Application Security Manager

 

 

BIG-IP ASM v10.1 features new protection from rogue web scraping of data preventing brand and IP dilution. In addition, as threats are growing in number and complexity, every attack is now explained and every violation includes detailed description of the exact check that ASM performed. With a new staging functionality, ASM allows updated policies to be transparent for testing without reducing current protection levels until ready for blocking. Now BIG-IP ASM enables new superior reporting with new user interface and PCI reports for detailed review of vulnerabilities allowing for fast mitigation and easy management. With new exporting of policies, BIG-IP ASM allows compliance to become easier with offsite auditors accessing files to audit policies, freeing up valuable IT time. Finally, administrators now use iRules to quickly design changes in policy events without effecting overall web site protection.

 

 

 

 

Aaron

Ups, I try to clarify that fact. I was told that 10.1 will be released in two months approximately and CLI ASM support will be.

 

iControl - got it, check it out.