when you say you want to do L7 migration, which attack you want to mitigated ? L7 mitigations is wide and can be brute force, DDoD, injections (XSS, SQLi)
Typically Adv WAF is the right product for this. here are some links. let us know if you need more sources.
Currently our layer7 is out of support and we need the functionality migrated to the F5. I'm new to F5 and would wish to have some help on how to accomplish the task of migrating from layer7 to F5.
Hi @Nforba it sounds like you may be referring to the former CA Layer7 API Gateway product? I don't believe we have any specific documented guidance on this. Do you have an idea of what functions were done on the Layer7 and we might be able to point you in the direction for how these would be setup on a BIG-IP?
These are fairly standard LTM functions so if you are familiar with basic LTM operations, you should be good. If not, you may want to have a look at university.f5.com so some introductory content on LTM to get yourself up and running.
We already have SAP deployed and the task I want to accomplish is using F5 as an API gateway that will route traffic to SAP. We do have BIG-IP ASM/AMP/LTM products.
You can achieve a lot of that but you'll need to dissect the functions from the existing Layer7 solution a little bit further. They do typically translate to what would be standard reverse proxy, SSL/TLS offload or bridging, rewriting, authentication and WAF functions on a BIG-IP. Each of those functions is a lot to unpack if you are just getting started with BIG-IP so I would suggest at least getting through some of the Getting Started courses on university.f5.com. I would also suggest discussing with your local F5 Solutions Engineer as well as they can probably get into a deeper discussion about what you have configured on your Layer7 and give you a bit of a road map on what to tackle first on your BIG-IP.
We are currently utilizing Layer7 as an API gateway, mainly to handle LDAP authentication and SAP ochestration. We want to move those services from layer 7 to F5 and get rid of layer7. I just need a process or steps to migrate any of the service
