Hannes_Rapp
Jan 12, 2016Nimbostratus
ASM scenario - Shared Policy for Dozens of Virtual Servers
Hello Team,
Perhaps someone has a creative solution to my problem.
Question: What would be a good way to put an ASM Security Policy to Transparent Mode (for one Virtual Server). Consider the details below.
- Policy is shared; it's in use for many instances of the same service (applied to multiple Virtual Servers)
- Transparent Mode operation is temporarily required for one Virtual Server, whereas the Blocking Mode operation should remain for all the other Virtual Servers
- De-attaching the policy from a specific Virtual Server is forbidden, all logs, such as Manual Traffic Learning suggestions must be preserved since there's a chance a Signature Update will be installed meanwhile.
I have a solution myself, but it involves a duplicate policy. Can the problem be solved without a duplicate policy, and without going the route of implementing a dedicated ASM Security Policy for every Virtual Server?
Regards,