For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Preet_pk's avatar
Preet_pk
Icon for Cirrus rankCirrus
Jan 17, 2022

Multiple ASM policy applied on Virtual Server

Hi,   We have a F5 design were single Virtual Server (VIP) is pointing to multiple application on back-end via iRule & iRule load balancing is based on HTTP::host (Layer 7)   for eg:   w...
ASM Advanced WAF
LTM
security
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Jan 18, 2022

Hi  ,

 

If ASM policy has set any blocks/drops which matches traffic pattern coming for "application b" then yes, it will disturb that traffic also. So best approach would be applying ASM policy to specific or desired HOST URL only where you want to have it. You can achieve same using LTM policy.

 

Create LTM policy where under condition you can match HOST that you want to match for enabling ASM policy and then under actions -

ENABLE --> ASM --> Select desired ASM policy

 

Once you apply above LTM policy on the vServer, ASM policy will get applied to traffic coming for given host only.

 

Hope it helps!