Forum Discussion
hooleylist
Oct 06, 2009Cirrostratus
Hi,
There are probably a few schools of thought on this. F5 is trying to provide automated tools to build a policy (the policy builder). For our customers, we use the Traffic Learning tool and manual policy edits instead as these methods provide fairly granular and specific ways to modify the policy. The automated tools have improved a lot in recent versions, so you might want to give that a try too.
The Getting Started guide and the Configuration Guide should give you some background on your options:
BIG-IP Application Security Manager: Getting Started Guide
https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm_get_start_10.html
Configuration Guide for BIG-IP Application Security Management
https://support.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm_config_10.html
Aaron