How to add asm to the existing LTM policy

Question

Hello&nbsp;
Is there a way to add the asm actions to an existing LTM policy. Let's say there is an LTM policy with a lot of rules and forwarding actions only. &nbsp;
When a I try to add the asm control to this policy it says that I can't as the existing rules have no asm actions. &nbsp;
On the other hand I can't add an asm action to rules before the asm control is added at the policy level.&nbsp;
How to add asm without recreating the whole policy and all its rules?&nbsp;
The same issue arises with the L7dos control.&nbsp;

stanislas_piro2 · Answer

Hi,
you can do it with tmsh:
modify ltm policy mypolicy controls add { asm } rules modify { all { actions add { 10 { asm disable } } } } rules modify { default { actions add { 1 { asm disable } } ordinal 1000 } }

it add asm disable action on every rules, add a default rule with asm disabled and add controls ASM. you can then define for every rules the ASM policy manually.

eastcoast_16835 · Answer

Thank you&nbsp;

Forum Discussion

How to add asm to the existing LTM policy

2 Replies

Recent Discussions

Chrome V 124+ on MacOS - Virtual Server Access Issue

F5 Rseries HA

Need advise to setup a policy on F5

F5 Rseries R2600 Tenant sizing

Can iRule mask the payload content on event logs of security

Related Content

Auditing Security Policy Updates

Minimizing Security Complexity: Managing Distributed WAF Policies

LTM Policy

iControl REST Cookbook - LTM policy (ltm policy)

Access policy, LTM policy and iRules