PEM Policy Rule Classification Didnt Match

Question

i run PEM POC in my lab and managed to control bandwidth or drop traffic for selected subscriber with any application.when trying to limit YouTube traffic, it seems the policy didnt match the youtube traffic even with custom URL category.below is my configurationwhere else can i take a look?pem policy 15mbps_policy {&nbsp;&nbsp;&nbsp; rules {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; youtube_block {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; classification-filters {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; filter0 {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; category Video&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; precedence 2&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; qos-rate-pir-downlink OneFiveMbps_Limiter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; qos-rate-pir-uplink OneFiveMbps_Limiter&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; url-categorization-filters {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; url_category0 {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; url-category AA_Custom_URL&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp; }}pem policy Drop {&nbsp;&nbsp;&nbsp; rules {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Drop_Rule {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; gate-status disabled&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; precedence 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }&nbsp;&nbsp;&nbsp; }}&nbsp;

hasmadihadi · Answer

i have tried select url filter only but still didnt match.let me try iRule if it works..

nikoolayy1 · Answer

What about using only url filter without ''category Video'' app filter as you may not have licensed this or you may need to configure it with iRules as below. Probaly you have checked if changing " precedence " or the rules if it changes something like making rule 1 with precedence 1 and rule 2 (the drop rule) with precedence 2.
&nbsp;
https://techdocs.f5.com/kb/en-us/products/big-ip-pem/manuals/product/pem-implementations-13-0-0/23.html
&nbsp;
Also check if the url database is correctly been pulled. Maybe with irule to see if youtube is corectly checked:
&nbsp;
https://clouddocs.f5.com/api/irules/CLASSIFICATION__urlcat.html
&nbsp;
&nbsp;
&nbsp;
Outside of that I can't give you more suggestions as this is also a hard topic for me 🙂

nikoolayy1 · Answer

Also it is interesting if you can check if the subscriber is matching the default second policy as mentioned in https://techdocs.f5.com/kb/en-us/products/big-ip-pem/manuals/product/pem-implementations-13-1-0/30.html&nbsp; Maybe also try to see if you can enable extra logging under Policy Enforcement &gt; Subscribers &gt; Activity Log &gt; Configuration as you can use a local publisher to see the data on the F5 device itself.
That are my final ideas as this could be a lab related issue as PEM is usually not available for LAB VM and maybe with the URL DB not licensed even the custom URL categories could having issues but I can't confirm this.

hasmadihadi · Answer

i didnt find the second policy in the link you provided. maybe you can point any quotes so can find it.i am quite sure the static subcriber match the policy&nbsp; and it just didnt match rule even with higher precedence than any rule in the same policy.if i enable URL filtering and PEM URL filtering license, is there any conflict?&nbsp;

nikoolayy1 · Answer

I meant second rule not second policy, my mistake.
&nbsp;
About "if i enable URL filtering and PEM URL filtering license, is there any conflict?" I have not enabled them at the same time to give you an answer to that question. Better check with the sales/solutions engineer that probably is helping you for the PoC.

Forum Discussion

PEM Policy Rule Classification Didnt Match

Recent Discussions

about persist hash [HTTP::query]

Problems with ping dropped packets

DoS profile Learning Phase

iqmgmt_ssl_connect: SSL error

R2600 device and tenant/partition configuration

Related Content

Auditing Security Policy Updates

Minimizing Security Complexity: Managing Distributed WAF Policies

Manage F5 BIG-IP Advanced WAF Policies with Terraform (Part 2 - Policy Import)

Access policy, LTM policy and iRules

Manage F5 BIG-IP Advanced WAF Policies with Terraform (Part 4 - Policy Lifecycle management)