F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Apr 14, 2016

SSO server not working when applying default http profile for ASM

Hi Folks,   I am in process to apply ASM security policies to our VS running on BIG-IP LTM + ASM version 11.6. I have successfully applied the ASM security policy (Staging/Transparent) to all VS e...
ASM Advanced WAF
security
Jason_Meurer_39's avatar
Jason_Meurer_39
Historic F5 Account
Apr 19, 2016

Assuming you have SSL in play here, did you also attach a client SSL profile to the SSO VIP? ASM needs both an HTTP and SSL profiles on 443 VIPs. Now this might drive to another question of if the SSO VIP is performing client certificate authentication which cannot be SSL offloaded. You would need to look at APM to duplicate that behavior or SSL Proxying to maintain the client certificate authentication and still leverage ASM.