Forum Discussion
SergioPontes_36
Oct 05, 2018Nimbostratus
ASM application security synchronization
When we are talking about an HA environment of two Big IPs with LTM and ASM operating, what would be the difference of the conventional configuration synchronization configuration for the application...
Simon_Blakely
Oct 08, 2018Employee
Did you verify that the actual ASM Policy content was synced, or was it just the policy name attached to an empty policy?
An ASM policy consists of an entry in the
bigip.conf
, which just tells mcpd that there is an ASM policy of that name, and an ASM database entry.
If mcpd sees ASM policy names in bigip.conf
without the matching ASM database policy data, the policies will be auto-created as empty (and transparent) ASM policies.
The actual policy configuration settings are stored by ASM in a mysql database - this is what is managed by ASM policy synchronization.
I suspect that you managed to sync the policy names but not the Policy settings.
Of course, it could be a new issue.Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects