F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Ashis_K_Patra's avatar
Ashis_K_Patra
Icon for Altocumulus rankAltocumulus
Jul 26, 2023

Testing a WAF policy

Hello All, I am trying to create a WAF policy and Test it as well which will be applied to the Virtual Server. Hence would like to know  Is there any checklist i need to follow while cretaing my W...
security
WAF Policies Deployment and Testing
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jul 27, 2023

Hi Ashis_K_Patra , 

Okay , Create another identical virtual server that hosts the same application and attach the same AWAF policy to it. 
Disable the AWAF policy in the production virtual server first. 
Enforce AWAF policy into blocking Second 
Test anything through the TEST Virtual server. 
After fininshing , remove this TEST Virtual sevrer , Apply your AWAF Policy again on the original or profuction Virtual server after makeing sure it meets your need from security. 

This is after assuming you that you can reach internally to the subnet of your virtual servers. 

I hope I gave you some insights 

Ashis_K_Patra's avatar
Ashis_K_Patra
Icon for Altocumulus rankAltocumulus
Jul 27, 2023

Dear Mohamed_Ahmed_Kansoh,

Thank you for your help, I can understand now,

One last question: When we will remove the WAF policy from Test and use the same policy in the Prod,

  1. DID the policy will have all the learnings recorded from Test and will be applied in Prod?
  2. OR we need to record the learnings from TEST and do changes in the Prod ?

 

  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Icon for MVP rankMVP
    Jul 27, 2023

    Hi Ashis_K_Patra , 

    No everything will be recoreded in your AWAF policy even if you disable it from virtual server to another. 
    this not affect on Policy learning suggestions or settings. 

    By the way , you can test it on a lab >>> 
    Create AWAF policy and test some traffic and disable it on the current Virtual server then attach it to another >>> you will find all settings exist , and If you leant traffic from the newly virtual server and move this Policy to another Virtual server you will find all learnt suggestions and so on. 

    By the way , you can attach single AWAF policy in multiple Virtual sever >>> but don't do this in your current scenario as you want to test without affecting the production encironment.

    Also For your info , you can use two or more AWAF policies with single virtual server , but by using iRules or LTM policy. 


    • Ashis_K_Patra's avatar
      Ashis_K_Patra
      Icon for Altocumulus rankAltocumulus
      Jul 27, 2023

      HI Mohamed_Ahmed_Kansoh 

      I really Thank you for your help. I learned a lot from you. I will test and will analyse as you said. 

      Thanks whisperer for your contribution as well