Applies To:

Show Versions Show Versions

Manual Chapter: Upgrading HTTP Security Profiles to Security Policies
Manual Chapter
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Customers who wish to upgrade from the BIG-IP® Protocol Security Module to BIG-IP® Application Security Manager can use the Migration wizard to facilitate the upgrade process. The Migration wizard converts an HTTP security profile in the Protocol Security Module configuration to a security policy for a web application in Application Security Manager. If you are not familiar with the features of Application Security Manager, F5 Networks recommends you review this configuration guide before you perform the migration.
Important: The migration of an HTTP security profile in the Protocol Security Module configuration into a security policy associated with a web application in the Application Security Manager configuration cannot be reversed.
The Migration wizard guides you through the steps necessary to migrate security profiles in Protocol Security Module to security policies in Application Security Manager.
Once you have activated the license for the Application Security Manager, you can use the Migration wizard to convert any HTTP security profiles into a baseline security policy for the corresponding web application.
1.
In the navigation pane, in the Protocol Security section, click Security Profiles.
A new browser opens and displays the Security Profiles screen in the Application Security Configuration utility.
2.
In the Application Security navigation pane, in the Protocol Security section, click Migration.
The Virtual Servers Selection screen of the Migration wizard opens.
When you start the Migration wizard, the wizard automatically detects the virtual servers whose HTTP traffic profiles are associated with HTTP security profiles. As part of the migration, you create an application security class to replace the HTTP security profile. For detailed information on application security classes, refer to Chapter 3, Working with Application Security Classes.
1.
On the Virtual Servers Selection screen, for the Virtual Server setting, select the virtual server for which you want to create an application security class.
2.
For the Class setting, select one of the following options:
Create new
If you select this option, then type a name for the new application security class in the box, using only alphanumeric characters and the underscore character.
Use existing
If you already have one or more existing application security classes, you can select this option, and then select the application security class from the list.
3.
Click Next.
The Finish screen opens.
If you created a new application security class, the migration completes after you use the Deployment wizard to configure the security policy. See Chapter 6, Building a Security Policy Automatically with the Policy Builder, for more information.
If you used an existing application security class, click the Finish button on the Web Application Properties screen to complete the migration.
Note: If you apply a security policy application template, the template overrides any settings that may have been imported by the Migration wizard.
Table of Contents   |   << Previous Chapter   |   Next Chapter >>

Was this resource helpful in solving your issue?




NOTE: Please do not provide personal information.



Incorrect answer. Please try again: Please enter the words to the right: Please enter the numbers you hear:

Additional Comments (optional)