Forum Discussion
bboyjnr_8532
Cirrus
Mar 24, 2014TMSH - ASM - 11.4 - adding ASM components to a VS
Hi Guys,
Does anyone happen to know the correct syntax to add an ASM enabled security profile/policy to a VS?
I have also tried to add one of the default ASM logging profiles but this still...
ChrisMutzel_151
Altocumulus
Dec 07, 2015Something like this should work (I am doing this on 11.6):
Download the policy from wherever you are hosting it
curl <..your policy location...> asm-policy-linux-high.xml
Load the policy from the file you downloaded
tmsh load asm policy file /home/admin/asm-policy-linux-high.xml
Create an LTM policy which we will use to attach the ASM policy
tmsh create ltm policy policy-over-tmsh strategy first-match
Add an asm rule to the ltm policy ruleset
tmsh modify ltm policy policy-over-tmsh controls add { asm }
Activate the asm policy
tmsh modify asm policy /Common/linux-high active
Attach the ASM policy via a rule in the LTM policy ruleset
tmsh modify ltm policy policy-over-tmsh rules add { associate-asm-policy { actions replace-all-with { 0 { asm request enable policy /Common/linux-high } } } }
Someone smarter than me can figure out how to collapse this into fewer tmsh commands.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects