Netscaler WAF Migration

Hawary, I believe the way you have fashioned out your deployment makes sense. Ofcourse you won't be able to transfer your learnt traffic from the Netscaler WAF to the F5 Big-IP ASM, but we can learn the traffic. Fortunately, you will be able to quite easily migrate the F5 Big-IP LTM config to the new LTM/ASM device and this should be up and running in no time, and able to give you your existing functionality and performance almost immediately. Ensure that ASM sees all the traffic that you intend it to protect, and policy builder should have a good view of the traffic and build the appropriate policy for you, usually faster with the more traffic it sees for the application(s). You can monitor the learning process of Policy Builder to ensure that things are going as you would expect. Hope this helps.