For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mo9823's avatar
Mo9823
Icon for Nimbostratus rankNimbostratus
Oct 07, 2019

One ASM Security Policy for Multiple web applications

Hello,   I got a call for a customer to verify the ASM Polices for the published applications, I found that he has 7 applications shares one policy. this policy is in blocking mode and applicati...
ASM Advanced WAF
BIG-IP
security
Kevin_Davies's avatar
Kevin_Davies
Icon for Nacreous rankNacreous
Oct 08, 2019

Option 2 first. If the vulnerabilities cannot be resolved using the existing policy then explore option 1. Even then, clone the existing policy and adjust as needed only for applications that require it. Each new policy adds the same overhead as the original in terms of ongoing management. Given the client and their needs its really a judgement call on your behalf but that is where I would start.