# Generic security Policy for All Virtual Servers

**URL:** <https://community.f5.com/t/generic-security-policy-for-all-virtual-servers/42662>\
**Category:** Technical Forums\
**Tags:** asm-advanced-waf, super-netops, security, security-policy, ltm\
**Created:** [May 28, 2018, 9:05am UTC](https://community.f5.com/t/generic-security-policy-for-all-virtual-servers/42662 "2018-05-28T09:05:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dani\_martinez\_2](https://avatars.discourse-cdn.com/v4/letter/d/65b543/32.png) [@dani\_martinez\_2](https://community.f5.com/u/dani_martinez_2)\
**Post date:** [May 28, 2018, 9:05am UTC](https://community.f5.com/t/generic-security-policy-for-all-virtual-servers/42662/1 "2018-05-28T09:05:24Z")

</div>

Is there the possibility to create a unique ASM Security Policy and assign that policy to a bunch of Virtual Servers? I mean like a common Policy for all of them, once they virtual servers are created that policy is assigned to them

---

<div class="post-metadata">

**Author:** ![youssef1](https://avatars.discourse-cdn.com/v4/letter/y/ed655f/32.png) [@youssef1](https://community.f5.com/u/youssef1)\
**Post date:** [May 28, 2018, 9:26am UTC](https://community.f5.com/t/generic-security-policy-for-all-virtual-servers/42662/2 "2018-05-28T09:26:39Z")

</div>

Hi,

An asm policy is usually dedicated for an specific application (because each application has specifities: OS, DB, language, …).

If you affect the same policy to all your application you risk having a lot of false positives. and high security risks.

the disadvantages are as follows:

- hard to maintain.
- false positives.
- white listing will impact other application.
- release an blocage will impact other application.
- …

I advise you to create a unique policy by application however you can create a generic template and use it for deploying all your application…

let me now if you need more details.

regards,