Forum Discussion

danielpenna's avatar
danielpenna
Icon for Cirrus rankCirrus
Feb 12, 2015

ASM Policied applied in two locations in 11.5.1 GUI

Hi Team, General question, have recently upgraded from 11.2.1 to 11.5.1 ( removoing HTTP classes ) and had to rework some ASM policies after that upgrade over to the Profile way of working.

 

What is currently confusing me is in the GUI secion, "Local Traffic ›› Virtual Servers : Virtual Server List ›› VS-name" there is your usual Properties, Resources, Security and Statistics tab.

 

With a ASM policy you seem to have to assign it under a LTM profile ( with a rule in the Profile for the ASM policy ) for it to work. What confuses me is under the Security Tab there is a drop down box for "Application Security Policy" where it looks like you can assign an ASM policy directly.

 

What takes precedence ? Can I assign a ASM policy directly under the security tab and NOT apply it as a Policy ?

 

ASM Advanced WAF
management
security

1 Reply

Sort By
  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 12, 2015

    AFAIK, if you assign a policy at the virtual server it'll automatically create a policy for you. Should have the format "auto_l7...." Or something similar.

     

    If you're using different policies dependant on traffic classification e.g. uri, on the same virtual server, then you'll need to use a policy. If you do this then it will not show in the virtual server - security tab. Think it says disabled.

     

    Hope this helps.