Mar 07, 2017
Paul, here's the snippet I'd like you to run. Please note the comments I've made in the output section at the bottom, there's a question mark in it for you to answer (if you can).
Configuration
$User = "user"
$Password = "password"
$BigIP = "10.10.10.10"
Allow TLS1.2
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Initialize Snapin
if ( (Get-PSSnapin | Where-Object { $_.Name -eq "iControlSnapIn"}) -eq $null ){
Add-PSSnapIn iControlSnapIn
}
Connect to the BigIP
$Success = Initialize-F5.iControl -HostName $BigIP -Username $User -Password $Password
Get an iControl Handle
$F5 = Get-F5.iControl
$f5.LocalLBVirtualServer.get_profile("/Partition/VIP-name")
profile_type profile_context profile_name
------------ --------------- ------------
PROFILE_TYPE_HTTP PROFILE_CONTEXT_TYPE_ALL /Common/http
PROFILE_TYPE_CLIENT_SSL PROFILE_CONTEXT_TYPE_CLIENT /Common/sslprofile
PROFILE_TYPE_TCP PROFILE_CONTEXT_TYPE_ALL /Common/tcp
PROFILE_TYPE_WEBSECURITY PROFILE_CONTEXT_TYPE_ALL /Common/websecurity <-- Not sure where this comes from, but it seems like an indication that ASM is enabled?
PROFILE_TYPE_UNKNOWN PROFILE_CONTEXT_TYPE_ALL /Partition/ASM_test_policy <-- This policy's real name is "test_policy". "ASM_" as added by the API (or configuration). This caused me a lot of grief when the writing the new version. :)
- How does the profile names look to you? Is there a prefix?
- Do you also have a profile type called "PROFILE_TYPE_WEBSECURITY" for every VIP with an ASM policy?
/Patrik