Create WAF Parent PolicyΒΆ

Task 1 - Create a parent waf policy using info on table below:

Policy Name waf_Base
Policy Type Parent
Policy Template Rapid Deployment Policy
Learning Mode manual
Signature Staging Disabled
  1. Select the Security->Application Security->Security Policies->Policies List page

  2. Click Create New Policy

  3. Select Advanced options

    ../../_images/image308.png
  4. For Policy Name enter waf_base

  5. For Policy Type select Parent

  6. For Policy Template select Rapid Deployment Policy

  7. For Learning Mode select Manual

  8. Change Signature Staging to Disabled

    ../../_images/image309.png
  9. Click Create Policy

  10. Once the policy is created, with the waf_base policy selected, in the right panel click Inheritance Settings.

  11. Configure the inheritance settings as shown on the image below, and then click Save Changes

    ../../_images/image310.png

Note

Beginning in BIG-IP ASM 13.0.0, you can create a parent security policy and have child security policies refer to it (layered policies). A parent security policy defines common Policy Section elements and settings that provide baseline protection for your environment and are inherited by all child policies attached to it. You identify the elements and settings that can be modified in child security policies and those that are mandatory and cannot be modified. When you modify elements and settings in the parent security policy, the system rapidly applies them to all attached child policies.