Forum Discussion

Chen_Tat_93126's avatar
Chen_Tat_93126
Icon for Nimbostratus rankNimbostratus
Jun 20, 2011

Exporting ASM policies into existing LTM box

Hi all,     I have an existing ASM 3600 and I wish to export the application security classes and the security policies and then import and merge them into an existing LTM 3900 box.      ...
app sec
BIG-IP Access Policy Manager (APM)
security
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 21, 2011
Which specific 9.x version are your policies? How many policies do you have? How complex are the policies you've deployed?

 

 

There were some significant improvements and changes to ASM in 9.4.2. If your policies are from before that I'd strongly consider rewriting them from scratch on v10. You can take a lot of the basics from the old v9 policy and configure it manually in the v10 policy, but so much changed in 9.4.2 that I don't think it's useful to use the policies which are automatically generated by ASM in an upgrade from pre-9.4.2 to 9.4.2+. You might also consider using the 10.2.2 policy builder to automatically start new policies.

 

 

I'd also talk with your local F5 or partner SE to get recommendations based on your specific scenario.

 

 

Aaron