This feature is available on the AppWall standalone and AppWall VA devices. It is not available on the AppWall module within Alteon.

Transcription

1 AppWall (Web Application Firewall) Policy Distribution Feature Using the AppWall Policy Distribution mechanism you can either export or import a configuration, or distribute a full policy or just one application path to a different AppWall device. This feature is available on the AppWall standalone and AppWall VA devices. It is not available on the AppWall module within Alteon. The AppWall Policy Distribution helps manage AppWall configurations across an organization. It can be used to: Distribute configuration from QA/staging to production Distribute application paths from one HTTP Tunnel to another HTTPS Tunnel Replicate tunnels and/or application paths on the same AppWall device Policy distribution can be performed in three levels: Server Tunnel Application Path Note: Policy Distribution to a different AppWall device will only work with the same AppWall version. To distribute server configuration from one AppWall to another 1. In the Configuration view, right-click the AppWall server and select Policy Distribution. 2. Click Next. 3. Select Distribute to One or More AppWall Servers and click Next.

2 4. Select Format Configuration for Server Distribution and click Next. 5. Select Security Policy and click Next. 6. Select a target server from the list or click Add to add another one.

3 7. Enter the Username and Password of the target AppWall device and click Next. 8. Select Quick Distribution and click Next. 9. Select Edit.

4 10. Set the IP of every tunnel on the target AppWall and click Next. 11. Uncheck all options if you don t want to change the tunnel\filters operation mode after distribution process from passive to active and click Next. 12. Select Backup <target AppWall> configuration and click Next.

5 13. A transfer competed message appears. Click OK. 14. Click Finish. Connect to the target AppWall and select Apply to apply all the changes made. Review the tunnel settings and Web applications. To distribute a specific tunnel configuration or replicate a tunnel configuration within the same AppWall 1. In the Configuration view, right-click the AppWall server and select Policy Distribution.

6 2. Click Next. 3. Select Distribute to One or More AppWall Servers and click Next. 4. Select Format Configuration for Tunnel Distribution and click Next. 5. Select the tunnel to be distributed. 6. Select a target server from the list or click Add to add another one. Note: To replicate a tunnel on the same AppWall, select the same Available Server as the Target Server.

7 7. Click Next. 8. Enter the Username and Password of the target AppWall device and click Next. 9. Select the distributing option and click Next. Note: If there already exists a tunnel with the same name as the source tunnel, select Create Unique Web Application Name if Web Application Name Already Exists. This is also mandatory when you replicate a tunnel on the same AppWall.

8 10. Select the Listening Address IP and the Protected Web Server of the target AppWall and click Next. 11. Uncheck all options if you don t want to change the operation mode after the distribution process and click Next. 12. Check Backup <target AppWall> configuration and click Next.

9 13. A transfer competed message appears. Click OK. 14. Click Finish. 15. Connect to the target AppWall and Apply to apply all the changes made. Review the tunnel settings and Web applications. To distribute a specific application path 1. To distribute an application path to a different AppWall, you must first add it to your AppWall MNG Application, as shown below. 2. Right click the application path that you want to distribute and select Distribute Application Path.

10 3. Click Next. 4. Select Distribute to One or More AppWall Servers and click Next. 5. Select the target AppWall server and click Next. Note: The target AppWall can be the same if you want to clone the application path or the other AppWall server. 6. Select the tunnel and host on the target AppWall and click Next.

11 7. Select Override Existing Application path in Server or manually define an application path on the target AppWall and click Next. 8. Review the summary and click Next. 9. Select Backup Server Configuration and click Next. 10. Click Finish. 11. Connect to the target AppWall and Apply to apply all the changes made. Review the tunnel settings and Web applications. 12. For more information and examples refer to the AppWall User Guid