Forum Discussion

Gilles_LHérault's avatar
Gilles_LHérault
Icon for Nimbostratus rankNimbostratus
Jan 08, 2015

Migration from ISA to APM/LTM, can you do it with iControl

Hey guys, so basically we're in the planning phase of a large scale migration from ISA 2006 server to F5 BigIP with APM and LTM.

 

So we have a few hundreds of rules in ISA that are doing basic reverse proxy. We're planning to recreate them with Virtual servers and rewrite profiles. Some will have SSO with Kerberos as well.

 

Is there a way to chow down on the list of rules and get it done quickly with iControl? If all the rules get created by hand we're looking at a loooong time and a corresponding heavy price tag for the operation. I wish there was a quick Microsoft ISA to F5 converter... but that'S wishful thinking right? :)

 

Thanks!

 

application delivery
BIG-IP Access Policy Manager (APM)
deployment
design
LTM
security

1 Reply

  • MichaelatF5's avatar
    MichaelatF5
    Icon for Employee rankEmployee
    Feb 10, 2015

    This is actually a project that I have worked on a little bit in the past, but a method does not currently exist. You can export the ISA/TMG config as an XML, but the schema is pretty convoluted.

     

    Example ISA/TMG xpath for an F5 Virtual Server: /fpc4:Root/fpc4:Arrays/fpc4:Array/fpc4:RuleElements/fpc4:WebListeners/fpc4:WebListener

     

    Matching is fairly easy one you know what to look for, but as far as conversion...

     

    So to answer your question, no, there is currently no solution for automating this, although it would be awesome.