Forum Discussion

Ustrum's avatar
Ustrum
Icon for Cirrus rankCirrus
Jul 19, 2022

Enabling ASM profile from iRule fails

Hi everyone! I´m currently loadbalancing several hosts through the same VIP and I´d like to enable a different ASM profile for each service. To do so I´m trying to use an iRule like this:   when ...
application delivery
security
  • CA_Valli's avatar
    CA_Valli
    Jul 20, 2022

    Thanks for replying, what is your current BIGIP version? 

    Do you happen to see this message in /var/log/ts/bd.log as well?

     

    did not receive account configuration after 600 seconds

     

    If you see this you the cause might be BUG ID850673 

     

    Also, is the policy name shown as expected in bigip.conf file? Does this only happen on test policy or is it the same for all names? Since you said this is a test policy, have you tried deleting it and creating a new one? 

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP

Hello Pablo, does this VS have one default ASM policy globally configured? 

You need to assign a ASM Policy to your Virtual Server, before you can select a ASM Policy or selectively disable ASM at all.

Log does show that the current $targetASMprofile value is correct, have you tried adding quotes to ASM enable command? 

    ASM::enable "$targetASMProfile"

 

Ustrum's avatar
Ustrum
Icon for Cirrus rankCirrus
Jul 19, 2022

Hi, thanks for your response! yeah, it does have a default ASM policy applied, otherwise I wouldn´t be able to even use the ASM::enable command in the iRule applied to the VS.

Also, I've tried both with and without quotes to no avail 😞

  • CA_Valli's avatar
    CA_Valli
    Icon for MVP rankMVP
    Jul 20, 2022

    Thanks for replying, what is your current BIGIP version? 

    Do you happen to see this message in /var/log/ts/bd.log as well?

     

    did not receive account configuration after 600 seconds

     

    If you see this you the cause might be BUG ID850673 

     

    Also, is the policy name shown as expected in bigip.conf file? Does this only happen on test policy or is it the same for all names? Since you said this is a test policy, have you tried deleting it and creating a new one? 

    • Ustrum's avatar
      Ustrum
      Icon for Cirrus rankCirrus
      Jul 20, 2022

      Thanks maestro! I´m on a theoreticaly fixed version, 15.1.5.1 but I am indeed seeing those entries in the log. Just restarted the ASM proccess and it is working fine now....