For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cdjac0bsen's avatar
cdjac0bsen
Icon for Nimbostratus rankNimbostratus
Apr 08, 2019

Report to audit virtual servers without ASM policy or ASM policy disabled

We are looking to report on two issues: 1) All virtual servers that have no ASM policy applied, and 2) All virtual servers that have LTM policy rules that disable ASM policy   For 1, I know I can ...
ASM Advanced WAF
security
TMSH
jba3126's avatar
jba3126
Icon for Cirrostratus rankCirrostratus
May 21, 2019

Another long term solution is BigIQReport - https://devcentral.f5.com/s/articles/bigip-report

 

The latest version provides both way to to search and report of VIPs with no ASM policy as well as a way to see traffic policies attached. In our case we disabled ASM via iRule for WebSocket support that was lacking in ASM on version 12.x. We run a Windows task which runs every night to gather fresh captures of our configuration. BigIQ is another, but that is a bigger task. You can setup BigIPReport in a hour or less.

 

/jeff