For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kgaigl's avatar
kgaigl
Icon for Cirrocumulus rankCirrocumulus
Nov 19, 2019

ASM Guided Configuration not working

Hello,

 

I want to test the AWAF with guided configuration.

 

yesterday with version 14.1.2.1 I had always error 403 when i click on the menue, today i made a update to 14.1.2.2, now i get a 404

could someone point me where to search for the error?

 

thanks

 

Karl

8 Replies

  • kgaigl's avatar
    kgaigl
    Icon for Cirrocumulus rankCirrocumulus

    Oh, sorry, forgot to post.

     

    under "iApps -> Templates -> TemplatesLX" I newly imported the noarch-files, then it was ok

  • kgaigl's avatar
    kgaigl
    Icon for Cirrocumulus rankCirrocumulus

    I've got another VE-Testmachine and I see a big difference with files:

     

    On the non-working machine I see under ls /var/config/rest/iapps/ only an empty folder RPMS

     

    On a working machine I see under ls /var/config/rest/iapps/:

     

    A lot of folders beginning with f5-iappslx-...

  • kgaigl's avatar
    kgaigl
    Icon for Cirrocumulus rankCirrocumulus

    I found this:

    https://techdocs.f5.com/kb/en-us/products/big-ip_apm/releasenotes/product/relnote-guided-config-4-1.html#taskId

    under Known Issues ID 748912:

    1. "After a failover on a multi-blade chassis, the following error message may sometimes appear when attempting to access the guided configurations: "Not Found The requested URL /iapps/f5-iappslx-waf-app-comp-protection/index.html was not found on this server." To successfully access the guided configurations:Log in to the BIG-IP device via SSH.
    2. Run the following command: cd /var/config/rest/iapps/
    3. Run the following command: rm -rf f5-iappslx*
    4. In the BIG-IP UI, go to Security > Guided Configuration and the guided configurations will reinstall for viewing and editing.

    but when i have a look:

     # ls -al  /var/config/rest/iapps/
    total 12
    drwxr-xr-x.  3 root root 4096 Nov 21 08:53 .
    drwxr-xr-x. 13 root root 4096 Nov 19 12:34 ..
    drwxr-xr-x.  2 root root 4096 Nov 19 09:22 RPMS

    there is only the empty folder RPMS

    (when I use Firefox I get the message "Not Found

    The requested URL /iapps/f5-iappslx-access-framework/index.html was not found on this server.)

  • kgaigl's avatar
    kgaigl
    Icon for Cirrocumulus rankCirrocumulus

    additional info:

    the same "Access -> guided configuration"

  • kgaigl's avatar
    kgaigl
    Icon for Cirrocumulus rankCirrocumulus

    thanks, but still the same.

     

    because we're usually working with TACACS-Auth, i've tried the admin/root user, makes no difference.

    removed ASM-Policies, still the same.

     

    got no idea where to search, opened a case in support, maybe they can help.

     

    btw: this is a VE test-machine, but the same on a cluster of 2 i4800

  • Karl,

     

    From CLI try issuing the following command then attempt to access guided config again:

    # bigstart restart restjavad restnoded

     

    Best,

    Andrew