For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Htoo_Mya_Aye_16's avatar
Htoo_Mya_Aye_16
Icon for Nimbostratus rankNimbostratus
Mar 11, 2015

Specific ASM Policy Synchronization between Active - Active Data Centers

By using GTM, Active - Active Data Center is running in our environment and the separate ASM policy is applied to each data center. In DC, there are two ASM policy for each specific services but in D...
ASM Advanced WAF
availability
deployment
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Mar 11, 2015

Could you setup a Sync Only Device Group and include all 3 BIG-IPs in this group. Once done configure the "Application Security Synchronization" to use this Sync Only Group. This way all 3 BIG-IPs will have the same ASM policy/configuration.

 

See the following for help (not sure of you're TMOS version but this should be standard info):

 

https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-1-0/4.html

 

Section "Overview: Synchronizing ASM systems for disaster recovery"

 

Hope this helps,

 

N