Forum Discussion

Ireda's avatar
Ireda
Icon for Cirrus rankCirrus
Sep 26, 2023
Solved

Deploy BIG-IP ASM for API Application

Dears My Manager informed me that we need to configure BIG-IP LTM and ASM for API application, what is the API application for F5? Is this different in implementation from normal web application or ...
ASM API
security
  • Mohamed_Salah_'s avatar
    Mohamed_Salah_
    Sep 27, 2023

    Hello,

    The swagger file will contains all information related to the service, so you can just start checking the event logs for any violations matching with the application, and then tune the policy accodingly.

    If you copied the policy, it will copy all its entities only if you have applied all changes on the old policy. But the learning suggestions will not be copied.

    So you can go with the test enviornment first and create it in the learning mode, and when everythign is stable, you can import the same policy in the production enviornment, and start monitoring the policy.

    Thanks,

    Mohamed Salah

Ireda's avatar
Ireda
Icon for Cirrus rankCirrus

Thanks for reply,
There are any different in deployment from normal Web application after I upload the swagger file.
Also, how can I monitor the API application at L7? it is the web application or different.

Also, If I copied the testbed policy to the production environment, it will be copied with learning parameters, URLs, ...etc or I need to make the same policy for production under monitoring in transparent mode.

Mohamed_Salah_'s avatar
Mohamed_Salah_
Icon for MVP rankMVP
Sep 27, 2023

Hello,

The swagger file will contains all information related to the service, so you can just start checking the event logs for any violations matching with the application, and then tune the policy accodingly.

If you copied the policy, it will copy all its entities only if you have applied all changes on the old policy. But the learning suggestions will not be copied.

So you can go with the test enviornment first and create it in the learning mode, and when everythign is stable, you can import the same policy in the production enviornment, and start monitoring the policy.

Thanks,

Mohamed Salah

Related Content