Forum Discussion
Rahul_More
Cirrus
CirrusASM security policy configuration auto changed
Hi Guys, We have BIG-IP ASM in our environment which is loaded with 111 security policies, Out of all 101 policies configuration got changed suddenly and each policy is having learning and bloc...
yes that would very much be my advise. it doesnt feel right, you want to know why, but at some point that becomes more unlikely and the best thing is to just move forward.
Rahul_MoreCirrus
CirrusHello Boneyard,
Thanks for suggestion, I already have a case open with F5 support but no root cause update I received from them as they don't see the logs as why this was happened and removed user-defined template from the device and assigned "Fundamental" template to all affected policies.
.As to verify, I have uploaded the same template again and created test policy by selecting the same custom template to the test policy and then deleted it manually. And the result was "None".
It means it does not happened due to policy template deleted. This was something else but not sure what was that.
Please guide if in case any other possibilities.
Regards,
Rahul
boneyardMVP
if there are no logs then it isnt possible determine a cause with any certainty, it will remain a guess.
- boneyard
i dont know understand what exactly you are now asking.
if F5 support with access to your system can't tell you, the chance is very small someone here can.
so what are you looking for now?
- boneyard
yes that would very much be my advise. it doesnt feel right, you want to know why, but at some point that becomes more unlikely and the best thing is to just move forward.
- Rahul_More
Hi Boneyard,
That's correct, but need to re-enable waf security policies to respective virtual servers and issue is unknown so can't proceed with waf association.
Is there any other possibilities for this type of cause.
Regards,
Rahul