For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dan_Markhasin_1's avatar
Dan_Markhasin_1
Icon for Nimbostratus rankNimbostratus
Dec 17, 2015

Upload more than one WSDL to ASM Policy?

Hi,

 

I am trying to figure out the best way of protecting applications that have more than one web service. For individual web services we can simply upload the WSDL into the XML profile, but what is the BKM in case the same application exposes more than one web service (each with a different schema)?

 

It seems that it is not possible to upload more than one WSDL file to an XML Profile, so how can we protect applications that expose multiple web service? Do we necessarily have to create a separate Virtual Server (and a separate ASM policy) for each web service exposed, even if it is exposed by the same application/server?

 

Thanks, Dan

 

application delivery
ASM Advanced WAF

3 Replies

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Dec 17, 2015

    Dan, the only way i see this happening is to create more than one XML Profile, associate each WSDL file to, and then assign the profile to the relevent object e.g. URL, for each part of the application using Web Services.

     

    When you create a URL you can re-configure the Header-Based Content Profiles and serve all the traffic to this URL via the XML Profile or only traffic that has "xml" in the request header/value.

     

    Does that help?

     

    Thanks Nathan

     

  • Dan_Markhasin_1's avatar
    Dan_Markhasin_1
    Icon for Nimbostratus rankNimbostratus
    Dec 17, 2015

    Hi Nathan,

     

    As a matter of fact that seems to accomplish exactly what I need! :)

     

    I am going to test it now, thanks a lot!