NimbostratusI'm deploying ASM to more of my companies sites. When I did ASM training they recommended one profile per site to keep it separated for reporting, etc. What I'm wondering is, is there anyway to tie it to a list of allowed countries? For example, if I have 20 different ASM policies, but I want them to all have the same countries allowed? It becomes a hassle if I have to add a new country to each policy individually.
NacreousI think there is no such possibility, because each policy is separate instance.
NimbostratusCurrently there is no way to do this that I know of. This sounds like a good suggestion for an RFE thought, it would be nice if you could at create Geo-Location lists and attach them separately to each policy similar to how you can create Attack Signature lists. That way if you had 4 applications that had the same Geo-Location requirements you could manage one list for those 4 applications.
I have also submitted an RFE to be able to create two separate lists in a policy one for countries you want to block and one for countries you want to log all traffic from.
Nimbostratus
NimbostratusCurrently there is no way to do this that I know of. This sounds like a good suggestion for an RFE thought, it would be nice if you could at create Geo-Location lists and attach them separately to each policy similar to how you can create Attack Signature lists. That way if you had 4 applications that had the same Geo-Location requirements you could manage one list for those 4 applications.
I have also submitted an RFE to be able to create two separate lists in a policy one for countries you want to block and one for countries you want to log all traffic from.
Nimbostratus