Managing many WAF policies
My question is more likely to be administrative question, and less technical. And I need some advices on this.
We're managing so many WAF policies for so many websites. About 50+ policies. And each website has his own developers. So each time there is WAF suggestions on each policy we contact each developer to tell us if we should accept those suggestions or discard them. And this is a lot of work.
Those developers has no access to the F5 machine and even have no clue how to manage it.
I thought about creating an FTP server where I can upload those suggestions there and give access to developers and then they will update me which suggestions to approve and which not. But I'm not sure if this is creative solution, plus there will be a lot of work of exporting and uploading suggestiins.
Has any one faced the same thing and came up with a creative solution and made it easy to manage this amount of policies with those amount of developers? What do you think about this?