For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Apr 14, 2016

SSO server not working when applying default http profile for ASM

Hi Folks,   I am in process to apply ASM security policies to our VS running on BIG-IP LTM + ASM version 11.6. I have successfully applied the ASM security policy (Staging/Transparent) to all VS e...
ASM Advanced WAF
security
nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Apr 14, 2016

Sounds like the SSO server is not using HTTP traffic, hence by adding the HTTP profile it's breaking. Simplistically, ASM is protecting against HTTP attacks, so if the VIP is not HTTP aware then no ASM policy will be required. There's no way of assigning an ASM policy to a non-HTTP VIP I'm afraid.