F5 ASM on vCMP Instance (i-Series Hardware) Deployment Query - Integration with LTM/APM Modules
F5 ASM on vCMP Instance (i-Series Hardware) Deployment Query - Integration with LTM/APM Modules Hello there We are currently running physical i5800 BIG-IP hardware (BIG IP v13.1.0) with LTM and APM modules provisioned. LTM is provisioned across all vCMP guests including the host. APM is provisioned across one vCMP guest as this is in a testing phase of integration with LTM. Effectively, we are running one single vCMP guest with multiple LTM VIP's and adjacent APM policies configured per virtual-server. We want to now integrate ASM on top of the vCMP host with LTM/APM modules current provisioned. Is there a recommendation of the best way to deploy this? Or potentially any drawbacks? My initial question is, can we provision ASM specifically on one vCMP instance (per-instance), rather than across all instances or the physical hardware itself? The below references I found scanning DevCentral suggest so?: https://devcentral.f5.com/questions/asm-on-viprion-vcmp https://devcentral.f5.com/questions/asm-on-vcmp I checked the F5 ASM white-paper's which suggest that this is possible to deploy on vCMP guests (but does not specific if you can provision only on specific guests) https://www.f5.com/pdf/products/big-ip-application-security-manager-ds.pdf Many thanks for your help in advance! Any other recommended deployment methods would be much appreciated.