Forum Discussion

unam91's avatar
unam91
Icon for Nimbostratus rankNimbostratus
Apr 29, 2025

How i can apply fast 700 ASM policies?

how can i do to quickly apply 700 asm poltiics with changes, in the old days you could give an option to apply all. how can i do it now?

 

i have a bash script to do it by curls, but it is one by one of the poltiics. Is it possible to do them all at the same time?

thanks

3 Replies

    • unam91's avatar
      unam91
      Icon for Nimbostratus rankNimbostratus

      Hi 


      each policy is associated with a different virtual server

      Regards

  • Hi

    I believe here the wording "quickly" won't match the scenario. The apply process on AWAF is notably slow and the more policies you have on your system, slower will it be (link below provides some insights on why). ASM import/apply is sequential, no parallelism.

    I've opened a support case about 9 months ago (customer has about 400 policies and uses automation to deploy). The escalation engineer provide some memory optimization tweaks (config file changes), that brough a gain in speed, but not that significative. It still takes a few hours.

    Then there is an ASM API bulk endpoint (not much documented) that he tested for me. He said there is no significant performance gains, so we left it.

    I suggest you to read this article: K000149262: BIG-IP 17.x Advanced WAF change in behavior - update configuration to bd

    Sorry that I cannot help here.. suffering the same.