Forum Discussion

fLyf5_21542's avatar
fLyf5_21542
Icon for Nimbostratus rankNimbostratus
Jun 29, 2010

Installing ASM module and

Hi

 

 

I have got a new ASM module installed on LTM and have asked to use this for the new virtual servers. There are 3 virtual servers ( one for https offloading, one for offloading with application on port 8443 and one for SMTP).

 

 

could you please guide me how I can use ASM in this case. Do I need to create any profile in ASM, I am sorry if I am asking too basic, I am totally new to ASM.

 

 

Thanks

 

KM
app sec
BIG-IP Access Policy Manager (APM)
security
  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Jun 29, 2010
    Hi KM,

     

     

    There are quite a few new features in 10.2.0. You might consider upgrading to this version before beginning the policy building:

     

    https://support.f5.com/kb/en-us/products/big-ip_asm/releasenotes/product/relnotes_asm_10_2_0.htmlnew_feat

     

     

    If the VS's are in production, I'd start with a test VS that isn't accessible by the public. You can then experiment with the ASM and LTM configuration without affecting live traffic.

     

     

    You could start reading the ASM config guide to learn the basics of configuring and tuning a policy.

     

     

    https://support.f5.com/kb/en-us/products/big-ip_asm/versions.10_2_0.html

     

    -> BIG-IP Application Security Manager: Getting Started Guide

     

    -> Configuration Guide for BIG-IP Application Security Manager

     

     

    Aaron
  • fLyf5_21542's avatar
    fLyf5_21542
    Icon for Nimbostratus rankNimbostratus
    Jun 30, 2010
    Hi Aaron

     

     

    Thanks for your help. I can see that default http profile is already configured in the device. Is it ok if I use same for all the web application ( for https and for 8443 application )

     

     

    Once again thanks.