AltostratusDifferent policies same destination and pool
Hello,
I started recently administrated a f5 big-ip waf.
The previous administrator created a single virtual server for multiple websites (there are multiple SSL certificates on this virtual server). The traffic for all these websites is forwarded to one server pool that has a single IP in it.
My purpose is to sepparate all these websites in multiple virtual servers in order to custom each security policy.
Given this task I am searching for a way of doing the sepparation in multiple policies based on the url or certificate.
My question is if creating multiple virtual servers each one with another certificate but the same destination IP and same forwarding pool would work. Would the waf route the traffic in different policies based only on SSL certificate? I can not afford to test this because F5 is in a production envirenoment.
Thank you!
Hello,
Since the current setup now is using one virtual server IP for all services, and multiple ceritficates, you can create a LTM policy and start checking for the host header and based on this, apply the appropriate ASM polict based on this service.
For example:
Rule1:
if host header = www.abc.com when http request, Action: apply ASM policy 1.
Rule2:
if host header = www.aaa.com when http request, Action: apply ASM policy 2.
and so on, until you apply different ASM policies on all services. and then add a default rule at the end of the LTM policy, for exmaple (forward to pool x or disable ASM)
A fter finishing the policy, you must publish it and then assign the policy to the virtual server. everytime you caan to add/modify rule, you will need first to clone it and then modify the rules, and publish the policy again.
here is an example:
Thanks,
