Forum Discussion

TJ_Vreugdenhil's avatar
Jun 23, 2017

Migrate IIS ASM policy to Apache

Hello!

 

If a you have a established IIS ASM policy, but your company moves to Apache Servers. At a high level, does anyone have any tips for merging the two policies.

 

I have read this entire article here; https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/40.html

 

And at a high level, it seems that the steps are: 1) Create a new policy with the same distinctions but add Apache signature set. (Keep differentiate HTTP/HTTPS URI's and Encoding options the same)

 

2) update all signatures on both ASM systems (if moving to a different ASM)

 

3) Use the policy diff feature and manually carry over the attributes.

 

Thanks!

 

  • That is a good overview of the steps. There isn't a magic "do this" button, but if the web application is not changing it should be very simple to create the new policy with the policy diff function.