Microsoft SharePoint 2013/2010 iApp template

Hi! We are trying the iApp template v1.2.2rc2, we want to select an existing ASM Security Policy, but we are not seeing it as the "Do you want to deploy BIG-IP Application Security Manager?" shows only LTM Policies with ASM enabled.

As we are checking, you can't create manually an LTM Policy with ASM enabled, they are automatically created when they are assigned to an ASM Security Policy in a Virtual Server...

So, is it possible to add to the iApp template the option to select ASM Security Policies, and not LTM Policies with ASM enabled?

As a workaround, we are creating a fake temporary VS with the required ASM Security Policy enabled, then we are creating the iApp selecting the LTM Policy with ASM enabled that was automatically created by the fake VS, and finally we are removing the fake VS.... so hard :(

Thanks!

Hi Franco, you must create the ASM policy and then reference it in the LTM policy's rules. Once you do that, the ASM-enabled LTM policy should appear in the iApp drop-down.

Hi, as we are trying, 12.1.2 doens't support create an LTM Policy with a rule enabling ASM...

Hi, it absolutely does. I am looking at a 12.1.2 BIG-IP with an ASM-enabled LTM policy:

[azureuser@newscript-waf0:Active:In Sync] config  tmsh list ltm policy F5waf-ltm_policy
ltm policy F5waf-ltm_policy {
    controls { asm }
    last-modified 2017-08-07:02:11:44
    requires { http }
    rules {
        default {
            actions {
                0 {
                    asm
                    enable
                    policy /Common/F5waf-linux-medium-security_policy
                }
            }
            ordinal 1
        }
    }
    status legacy
    strategy first-match
}

[azureuser@newscript-waf0:Active:In Sync] config  cat /VERSION
Product: BIG-IP
Version: 12.1.2
Build: 1.34.271
Sequence: 12.1.2.1.34.271.34
BaseBuild: 0.0.249
Edition: Engineering Hotfix HF1
Date: Thu May 11 22:29:29 PDT 2017
Built: 170511222929
Changelist: 2224035
JobID: 840061