Apply ASM policy after making changes via iControl

Not ideal but there is a tmsh command to apply a policy in 11.3

Yes.

 

 

I wrestled with this as well and found the solution. You're looking for ASM/WebApplication->set_active_policy

 

 

Once you make the changes to the policy, you have to go into the web application (usually the same name as the policy) and use set_active_policy to apply it.

 

 

If you use Perl, PM me and I can give you a reference example.

 

 

Cheers,

 

 

Chris

Hi,

 

Is it a known behavior that when changes are made to an ASM policy using iControl, the "by user" field shows up as "iControl" instead of the actual user login id?

 

When the same is done via the GUI, the user id shows up with the admin user id.

 

We noticed this in v.11.2.1.

 

 

Also the logs under System -> Logs-> Application Security also contain the user to be iControl.

 

 

Regards

Hi,

 

Is it a known behavior that when changes are made to an ASM policy using iControl, the "by user" field shows up as "iControl" instead of the actual user login id?

 

When the same is done via the GUI, the user id shows up with the admin user id.

 

We noticed this in v.11.2.1.

 

 

Also the logs under System -> Logs-> Application Security also contain the user to be iControl.

 

 

Regards

Changes I make via icontrol show as my username. This is on 11.2.1.

Perfect, thanks. Got it working in pyControl.

 

 

Edit: hmm, not so fast doesn't seem to work on 11.4

 

Thanks Chris for letting me know.

 

Is there any possible reason as to why the "by user" field would show up as iControl instead of the actual username then?

 

There are no users configured as IControl under the user list.

 

EM is not used in this scenario as well.

 

 

Regards