All Collections
Integration Guide
F5 Big IP Application Security Manager
F5 Big IP Application Security Manager
H
Written by Hassan Shozeb
Updated over a week ago

About F5 Big-IP

BIG-IP Local Traffic Manager (LTM) and BIG-IP DNS handle your application traffic and secure your infrastructure. You'll get built-in security, traffic management, and performance application services, whether your applications live in a private data center or in the cloud.

Supported Actions

In SIRP, Application Service Manager (F5 Big-IP) allows you to execute the following actions:

S.no

Action

Description

1

PUSH HOSTNAME TO POLICY

Push Hostname to the policy on F5 Big IP for blocking

2

PUSH URL TO POLICY

Push URL to the policy on F5 Big IP for blocking

3

PUSH IP TO POLICY

Push IP to the policy on F5 Big IP for blocking

4

REMOVE HOSTNAME FROM POLICY

Remove Hostname to the policy on F5 Big IP for blocking

5

REMOVE URL FROM POLICY

Remove URL to the policy on F5 Big IP for blocking

6

REMOVE IP FROM POLICY

Remove IP to the policy on F5 Big IP for blocking

7

LIST POLICIES

List all policies that have been created for API-based actions

8

GET POLICY PARAMETERS

Gets all the parameters that have set in the policy

Enable and Configure the Big IP ASM App

  • Access F5 Big IP via a web browser

  • Navigate to the Security section > Guided configuration

  • Select API Security Protection > Rest API Security

  • Click Next at the bottom of the page

  • Set the Security Policy name

  • Set Enforcement mode to Blocking then Save & next

  • Select Default REST API Endpoint Protection then Save & Next

  • Leave virtual server properties blank & Save & Next

  • Deploy

Configure The SIRP App

Now login to SIRP, and enable the app Application Security Manager in the apps section.

  • Now click configure and add the following details and click Save:

    • Configuration Name: <Enter configuration of choice

    • URL: <Enter URL of ASM>

    • Username: <Login credentials used to log into F5>

    • Password: <Login credentials used to log into F5>

    • Policy_name: <Security policy name set when configuring REST API>

  • Give the Policy name (same policy name that has already been created earlier on the web interface of F5 Big-IP) then click save.

Now you will be able to perform all supported actions from SIRP.

F5 Application Security Manager viewing the Entries

Contents

1. For Viewing the IP entries. 1

1. For Viewing the URL entries. 2

2. For Viewing the Host names entries. 3

These entries are pushed into F5 Application Security Manager by SIRP through the rest API’s these profiles need to tag in block policies for blocking actions to be performed


​

1. For Viewing the IP entries

Security ›› Application Security : Security Policies : Policies List ›› SIRP_access_policy

1. For Viewing the URL entries


​Security ›› Application Security : URLs : Allowed URLs : Allowed HTTP URLs


​

2. For Viewing the Host names entries

Security ›› Application Security : Headers : Host Names

Did this answer your question?