Forum Discussion
bboyjnr_8532
Cirrus
Mar 24, 2014TMSH - ASM - 11.4 - adding ASM components to a VS
Hi Guys,
Does anyone happen to know the correct syntax to add an ASM enabled security profile/policy to a VS?
I have also tried to add one of the default ASM logging profiles but this still...
ChrisMutzel_151
Altocumulus
Dec 07, 2015Something like this should work (I am doing this on 11.6):
Download the policy from wherever you are hosting it
curl <..your policy location...> asm-policy-linux-high.xml
Load the policy from the file you downloaded
tmsh load asm policy file /home/admin/asm-policy-linux-high.xml
Create an LTM policy which we will use to attach the ASM policy
tmsh create ltm policy policy-over-tmsh strategy first-match
Add an asm rule to the ltm policy ruleset
tmsh modify ltm policy policy-over-tmsh controls add { asm }
Activate the asm policy
tmsh modify asm policy /Common/linux-high active
Attach the ASM policy via a rule in the LTM policy ruleset
tmsh modify ltm policy policy-over-tmsh rules add { associate-asm-policy { actions replace-all-with { 0 { asm request enable policy /Common/linux-high } } } }
Someone smarter than me can figure out how to collapse this into fewer tmsh commands.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects