Not able to assign ASM Policy

Hi Harris, Thanks for clearing me on this. I also have a question on sync between HA pair for ASM policies. After configuring the ASM policy and syncing the active device to group my stand alone device shows changes pending. I am not sure why this happens, but I am observing this kind of behavior only when a new ASM policy is configured. Is this a normal thing? Thanks, Sekhar

You cannot assign ASM security policies here. That is for local traffic policies also known as layer 7 (l7) policies. Layer 7 policies are used by asm policies. It is how the virtual server determines what traffic should be sent to asm. The security tab shown in this screen shot is where you associate an asm policy with the virtual server. After you do that an auto layer 7 policy will appear on the resource tab. The system creates this l7 policy to send all traffic to the asm policy that was assigned to the virtual server. It is also possible to create a custom l7 policy to send different http requests to different asm security policies. In that case you would not assign the asm policy on the security tab but only assign the l7 policy on the resource tab. I hope this makes sense!