Lightboard Lessons: BIG-IP Life of a Packet
Published Feb 01, 2017
Version 1.0Was this article helpful?
If you have a listener with multiple modules policies applied, the order of operations is as follows:
Clientside: LTM, AAM, ASM, APM, PROXY
ServerSide: PROXY, LTM, ASM, AAM, APM, LTM
For your particular scenario, APM login triggers before ASM parsing, so the login page is not protected by ASM in a single-VIP deployment, but if you deploy a layered VIP, that's possible as well on a single BIG-IP.