Forum Discussion

yadgayan's avatar
yadgayan
Icon for Cirrus rankCirrus
Nov 02, 2023

WAF profile replicate

Hi All, When we have a DR setup and we have WAF enabled in the Active site then how do we keep identical learned copy of the WAF profile on both sides?  Usually Primary site WAF profile is matured ...
application delivery
devops
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP

Not sure if your question about CI/CD is for me, but I think the articles that Nikoolayy1 mentioned about Terraform come close on how to implement CI/CD. 

Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Nov 08, 2023

If you want CI/CD use terraform or AS3 Declarative WAF (you can use ansible or terraform to again push as3) and host the WAF config in github. If you want to also handle learnings with policy builder then terraform is better or you can just make your own automation by using the api to export them.

Displaying BIG-IP ASM learning suggestions using the iControl REST API (f5.com)

Exercise 3.3 - Deploying a WAF policy through AS3 (f5.com)

 

    "new_asm_policy": {
      "class": "WAF_Policy",
      "url": "https://raw.githubusercontent.com/f5devcentral/FAS-ansible-workshop-101/master/3.3-as3-asm/Test_WAF_Policy.xml",
      "ignoreChanges": true
   }