Forum Discussion

aalkhuja_160331's avatar
Jun 13, 2016

Asm transparent policy drops traffic

Hi,

 

I have a problem which whenever i apply a transparent security policy to my existing VS, it affects the traffic. Knowing that the VS is related to OWA and Outlook Anywhere which created by the iApp. Any clue why tjis strange behavior.

 

BR Ammar

 

  • Hi,

     

    Do you have Data guard, Content Profiles or Virus protection activated ?

     

    Moreover, you have several settings that add javascript code to your application. Check on the browser side that you don't have any javascript errors in the console.

     

    • aalkhuja_160331's avatar
      aalkhuja_160331
      Icon for Cirrus rankCirrus
      Hi, I only have a "OWA10_XML" as an XML Profile. the AV is not activated nor the Data Guard.
    • Yann_Desmarest's avatar
      Yann_Desmarest
      Icon for Cirrus rankCirrus
      XML profile use a bufferization technique. Try removing the XML profile just for testing and see if your issues still there
    • aalkhuja_160331's avatar
      aalkhuja_160331
      Icon for Cirrus rankCirrus
      I got an official E-mail from F5 TAC team, The BIG-IP ASM system does not currently support RPC over HTTP. Bypassing the BIG-IP ASM system for connections that use RPC over HTTP https://support.f5.com/kb/en-us/solutions/public/17000/400/sol17411.html
  • Hi,

     

    Do you have Data guard, Content Profiles or Virus protection activated ?

     

    Moreover, you have several settings that add javascript code to your application. Check on the browser side that you don't have any javascript errors in the console.

     

    • aalkhuja_160331's avatar
      aalkhuja_160331
      Icon for Cirrus rankCirrus
      Hi, I only have a "OWA10_XML" as an XML Profile. the AV is not activated nor the Data Guard.
    • Yann_Desmarest_'s avatar
      Yann_Desmarest_
      Icon for Nacreous rankNacreous
      XML profile use a bufferization technique. Try removing the XML profile just for testing and see if your issues still there
    • aalkhuja_160331's avatar
      aalkhuja_160331
      Icon for Cirrus rankCirrus
      I got an official E-mail from F5 TAC team, The BIG-IP ASM system does not currently support RPC over HTTP. Bypassing the BIG-IP ASM system for connections that use RPC over HTTP https://support.f5.com/kb/en-us/solutions/public/17000/400/sol17411.html