23-Jun-2017 14:24
Hello!
If a you have a established IIS ASM policy, but your company moves to Apache Servers. At a high level, does anyone have any tips for merging the two policies.
I have read this entire article here; https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-11-5-0/40.ht...
And at a high level, it seems that the steps are: 1) Create a new policy with the same distinctions but add Apache signature set. (Keep differentiate HTTP/HTTPS URI's and Encoding options the same)
2) update all signatures on both ASM systems (if moving to a different ASM)
3) Use the policy diff feature and manually carry over the attributes.
Thanks!
24-Jun-2017 10:38
That is a good overview of the steps. There isn't a magic "do this" button, but if the web application is not changing it should be very simple to create the new policy with the policy diff function.