For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Dec 18, 2015

Hi Or,

 

I read alot about HTTP profile enable virtuals in front of APM enabled virtuals in a vip-targeting-vip configuration, but afaik is this configuration somewhat complex and also seems to have certain limitatations.

 

Beside of the possibility to pull of that specific configuration trick, what is in your opinion the effective outcome of that approach? Is the ASM module more secure than the APM module? Why not use APM to filter out any anonymous request, before letting ASM parse the remaining attacks?

 

Cheers, Kai