Applying an ASM policy to a virtual server using a port list ?

[Paul_T1]

Hi

Just wondering if its possible to apply an ASM policy to a VIP that is using a port list rather than a specific service port ?

I recall previously I changed a VIP that had an ASM policy from a specific port to a port list but it was then throwing up an error.

Many Thanks

[NAG]

Hi

You should be able to apply ASM policy to VS as long as are still using HTTP protocol.

If it is throwing, please post it here so we can review it.

Regards,

Nag

[Paul_T1]

Hi Nag, thanks for the reply.

Here is the error message it was giving back.

Configuration error: Virtual server (/Common/xxxxxx) with TMC or security ACL/NAT/IPI/DoS/Eviction/Scrubber/Blacklist Publisher configured cannot co-exist between them.

[Jim_M]

I see the same error when i try to use an address list as a destination in a virtual. ASM appears to want a specific IP destination

[Ivan_Chernenkii]

It looks like there is no issue in attaching ASM policy to such VS - it should work, while there is an issue with attaching logging profile to VS

[r_jakubski]

first check this: https://support.f5.com/csp/article/K22082255

then check this: https://cdn.f5.com/product/bugtracker/ID818737.html

finally try this: https://support.f5.com/csp/article/K28358628?utm_source=f5support&utm_medium=RSS

it helped me with attaching the logging profile

it also helped my customer when attempting to view/modify the security policies assigned to a VS generate an error "An error has occurred while trying to process your request"