About F5 Big-IP
BIG-IP Local Traffic Manager (LTM) and BIG-IP DNS handle your application traffic and secure your infrastructure. You'll get built-in security, traffic management, and performance application services, whether your applications live in a private data center or in the cloud.
Supported Actions
In SIRP, Application Service Manager (F5 Big-IP) allows you to execute the following actions:
S.no | Action | Description |
1 | PUSH HOSTNAME TO POLICY | Push Hostname to the policy on F5 Big IP for blocking |
2 | PUSH URL TO POLICY | Push URL to the policy on F5 Big IP for blocking |
3 | PUSH IP TO POLICY | Push IP to the policy on F5 Big IP for blocking |
4 | REMOVE HOSTNAME FROM POLICY | Remove Hostname to the policy on F5 Big IP for blocking |
5 | REMOVE URL FROM POLICY | Remove URL to the policy on F5 Big IP for blocking |
6 | REMOVE IP FROM POLICY | Remove IP to the policy on F5 Big IP for blocking |
7 | LIST POLICIES | List all policies that have been created for API-based actions |
8 | GET POLICY PARAMETERS | Gets all the parameters that have set in the policy |
Enable and Configure the Big IP ASM App
Access F5 Big IP via a web browser
Navigate to the Security section > Guided configuration
Select API Security Protection > Rest API Security
Click Next at the bottom of the page
Set the Security Policy name
Set Enforcement mode to Blocking then Save & next
Select Default REST API Endpoint Protection then Save & Next
Leave virtual server properties blank & Save & Next
Deploy
Configure The SIRP App
Now login to SIRP, and enable the app Application Security Manager in the apps section.
Now click configure and add the following details and click Save:
Configuration Name: <Enter configuration of choice
URL: <Enter URL of ASM>
Username: <Login credentials used to log into F5>
Password: <Login credentials used to log into F5>
Policy_name: <Security policy name set when configuring REST API>
Give the Policy name (same policy name that has already been created earlier on the web interface of F5 Big-IP) then click save.
Now you will be able to perform all supported actions from SIRP.
F5 Application Security Manager viewing the Entries
Contents
These entries are pushed into F5 Application Security Manager by SIRP through the rest API’s these profiles need to tag in block policies for blocking actions to be performed
Security ›› Application Security : Security Policies : Policies List ›› SIRP_access_policy
