Forum Discussion

pdms_echirolles's avatar
pdms_echirolles
Icon for Nimbostratus rankNimbostratus
Feb 14, 2017

ASM problem and bascul

Hi

 

A external ressource came to install an F5 cluster (LTM and ASM module) and leave the socity without given any production documentation. We faces to some issues recently

 

In ASM mode we have a OwnCloud site (file repositories). We were able to pass some queries in "learn" mode, but for the others this option is grayed out and the queries remain blocked. Is it possible to unlocke them? Also the first week the requests went, but overnight everything was blocked, we had an "attack signature" to access the site again.

 

We faces an other big issue. When the cluster switches to the secondary node, the OWA accesses remain blocked. However we haven't any issue with the synchronisation so we have the same configuration for each cluster member.

 

Thank you for your help

 

Regards

 

ASM Advanced WAF
LTM
security

1 Reply

  • nathe's avatar
    nathe
    Icon for Cirrocumulus rankCirrocumulus
    Feb 22, 2017

    pdms, hopefully this helps as the initial post is 1week old.

     

    I think you're first point about "learn" mode and unlocking them, i wonder if you mean you want to disable blocking mode on this and its greyed out. I would change policy to Transparent to see if you can then uncheck the block setting. I think this is what you are after.

     

    Re the secondary node. Whilst the devices may be in a Sync Failover device group, ASM also has a synchronisation feature, perhaps this isn't enabled. Go to Security - Options - Application Security - Synchronization and select you Sync group.

     

    Hope this helps,

     

    N