Nimbostratus
I have got a new ASM module installed on LTM and have asked to use this for the new virtual servers. There are 3 virtual servers ( one for https offloading, one for offloading with application on port 8443 and one for SMTP).
could you please guide me how I can use ASM in this case. Do I need to create any profile in ASM, I am sorry if I am asking too basic, I am totally new to ASM.
Thanks
KM
Cirrostratus
There are quite a few new features in 10.2.0. You might consider upgrading to this version before beginning the policy building:
https://support.f5.com/kb/en-us/products/big-ip_asm/releasenotes/product/relnotes_asm_10_2_0.htmlnew_feat
If the VS's are in production, I'd start with a test VS that isn't accessible by the public. You can then experiment with the ASM and LTM configuration without affecting live traffic.
You could start reading the ASM config guide to learn the basics of configuring and tuning a policy.
https://support.f5.com/kb/en-us/products/big-ip_asm/versions.10_2_0.html
-> BIG-IP Application Security Manager: Getting Started Guide
-> Configuration Guide for BIG-IP Application Security Manager
Aaron
Nimbostratus
Thanks for your help. I can see that default http profile is already configured in the device. Is it ok if I use same for all the web application ( for https and for 8443 application )
Once again thanks.