For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Apr 14, 2016

SSO server not working when applying default http profile for ASM

Hi Folks,   I am in process to apply ASM security policies to our VS running on BIG-IP LTM + ASM version 11.6. I have successfully applied the ASM security policy (Staging/Transparent) to all VS e...
ASM Advanced WAF
security
Jason_Meurer_39's avatar
Jason_Meurer_39
Historic F5 Account
Apr 19, 2016

Assuming you have SSL in play here, did you also attach a client SSL profile to the SSO VIP? ASM needs both an HTTP and SSL profiles on 443 VIPs. Now this might drive to another question of if the SSO VIP is performing client certificate authentication which cannot be SSL offloaded. You would need to look at APM to duplicate that behavior or SSL Proxying to maintain the client certificate authentication and still leverage ASM.