Forum Discussion

toneman's avatar
toneman
Icon for Altostratus rankAltostratus
Aug 03, 2022

ASM Local Traffic Policy to redirect on specific URL

This is getting more complicated the more I research it.  Here goes...  When a request contains a specific URL, I'd like to modify my local traffic policy to redirect traffic to an ASM policy that is...
security
  • boneyard's avatar
    boneyard
    Aug 03, 2022

    issue is probably with the client connect, which is when TCP starts and this is later. i dont know by hard what the other options are, but can you try something more http related?

toneman's avatar
toneman
Icon for Altostratus rankAltostratus

Correct, one VIP with two ASM policies, with a specific URL going to the second policy.  I don't want to use another virtual server.

I just saw article K35432913 "How to select a different ASM policy based on the URI Path in a request" that seems to address this although I'm getting an error when trying to save the suggested config in the article.  This error happens when I try to enable ASM for the secondary "redirect" policy.  If I choose "log" I'm able to save the policy...

The error says I'm defining an action which occurs before one of its conditions, or before a condition in an earlier rule with a lower ID.

 
 
I'm configuring this on a lab VE using v16
 
 
boneyard's avatar
boneyard
Icon for MVP rankMVP
Aug 03, 2022

can you share a screenshot of your local traffic policy? you might try to a redirect, which isn't needed, just enable ASM.

  • toneman's avatar
    toneman
    Icon for Altostratus rankAltostratus
    Aug 03, 2022

     

    • toneman's avatar
      toneman
      Icon for Altostratus rankAltostratus
      Aug 03, 2022

      If I choose "Log" in the dropdown vs "Enable" or "Disable", it allows me to save it.

       

      • boneyard's avatar
        boneyard
        Icon for MVP rankMVP
        Aug 03, 2022

        issue is probably with the client connect, which is when TCP starts and this is later. i dont know by hard what the other options are, but can you try something more http related?