For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sam_Hall's avatar
Sam_Hall
Icon for Nimbostratus rankNimbostratus
Sep 17, 2015

How to export APM access policy look and feel customisations?

So obviously people don't hack away at these templates on a live site. So how do you move customisations from a test AP to the live one?

 

Bonus points if there's a technique to export AP customisations to another F5 LTM instance entirely.

 

BIG-IP Access Policy Manager (APM)
security

2 Replies

  • Seth_Cooper's avatar
    Seth_Cooper
    Icon for Employee rankEmployee
    Sep 17, 2015

    In the past I would use either a test Virtual or a separate test box to test all my customization changes. When everything looked/worked as expected I would make note of all the pages I modified and then copy the contents into the new policy, save the policy, then test to make sure the new look and feel worked.

    You can look in the 

    /config/filestore/files_d/Common_d/customization_template_d
    directory and see all the pages that you modified in advanced customization. Just look for file with your access policy name in it.

    Seth

  • Walter_Kacynski's avatar
    Walter_Kacynski
    Icon for Cirrostratus rankCirrostratus
    Sep 17, 2015

    I have tested various ways of Exporting and Importing. Basic policy changes and advanced customization are easy to move between instances. The difficulty comes with Resource Items. I tend to rely on TMSH commands to migrate the resource items. I also use the Export/Import functions. When Importing I give the Access Policies a new name/version and check the "Reuse Existing Objects" option and then I use TMSH to apply the new policy name to my virtual servers.