If a you have a established IIS ASM policy, but your company moves to Apache Servers. At a high level, does anyone have any tips for merging the two policies.
I have read this entire article here;
And at a high level, it seems that the steps are:
1) Create a new policy with the same distinctions but add Apache signature set. (Keep differentiate HTTP/HTTPS URI's and Encoding options the same)
2) update all signatures on both ASM systems (if moving to a different ASM)
3) Use the policy diff feature and manually carry over the attributes.
That is a good overview of the steps. There isn't a magic "do this" button, but if the web application is not changing it should be very simple to create the new policy with the policy diff function.