Forum Discussion

Ustrum's avatar
Ustrum
Icon for Cirrus rankCirrus
Jul 19, 2022
Solved

Enabling ASM profile from iRule fails

Hi everyone! I´m currently loadbalancing several hosts through the same VIP and I´d like to enable a different ASM profile for each service. To do so I´m trying to use an iRule like this:   when ...
application delivery
security
  • CA_Valli's avatar
    CA_Valli
    Jul 20, 2022

    Thanks for replying, what is your current BIGIP version? 

    Do you happen to see this message in /var/log/ts/bd.log as well?

     

    did not receive account configuration after 600 seconds

     

    If you see this you the cause might be BUG ID850673 

     

    Also, is the policy name shown as expected in bigip.conf file? Does this only happen on test policy or is it the same for all names? Since you said this is a test policy, have you tried deleting it and creating a new one? 

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Jul 19, 2022

Hello Pablo, does this VS have one default ASM policy globally configured? 

You need to assign a ASM Policy to your Virtual Server, before you can select a ASM Policy or selectively disable ASM at all.

Log does show that the current $targetASMprofile value is correct, have you tried adding quotes to ASM enable command? 

    ASM::enable "$targetASMProfile"