Forum Discussion

Ustrum's avatar
Ustrum
Icon for Cirrus rankCirrus
Jul 19, 2022
Solved

Enabling ASM profile from iRule fails

Hi everyone! I´m currently loadbalancing several hosts through the same VIP and I´d like to enable a different ASM profile for each service. To do so I´m trying to use an iRule like this:   when ...
application delivery
security
  • CA_Valli's avatar
    CA_Valli
    Jul 20, 2022

    Thanks for replying, what is your current BIGIP version? 

    Do you happen to see this message in /var/log/ts/bd.log as well?

     

    did not receive account configuration after 600 seconds

     

    If you see this you the cause might be BUG ID850673 

     

    Also, is the policy name shown as expected in bigip.conf file? Does this only happen on test policy or is it the same for all names? Since you said this is a test policy, have you tried deleting it and creating a new one? 

CA_Valli's avatar
CA_Valli
Icon for MVP rankMVP
Jul 19, 2022

Hello Pablo, does this VS have one default ASM policy globally configured? 

You need to assign a ASM Policy to your Virtual Server, before you can select a ASM Policy or selectively disable ASM at all.

Log does show that the current $targetASMprofile value is correct, have you tried adding quotes to ASM enable command? 

    ASM::enable "$targetASMProfile"

 

  • Ustrum's avatar
    Ustrum
    Icon for Cirrus rankCirrus
    Jul 19, 2022

    Hi, thanks for your response! yeah, it does have a default ASM policy applied, otherwise I wouldn´t be able to even use the ASM::enable command in the iRule applied to the VS.

    Also, I've tried both with and without quotes to no avail 😞

    • CA_Valli's avatar
      CA_Valli
      Icon for MVP rankMVP
      Jul 20, 2022

      Thanks for replying, what is your current BIGIP version? 

      Do you happen to see this message in /var/log/ts/bd.log as well?

       

      did not receive account configuration after 600 seconds

       

      If you see this you the cause might be BUG ID850673 

       

      Also, is the policy name shown as expected in bigip.conf file? Does this only happen on test policy or is it the same for all names? Since you said this is a test policy, have you tried deleting it and creating a new one? 

      • Ustrum's avatar
        Ustrum
        Icon for Cirrus rankCirrus
        Jul 20, 2022

        Thanks maestro! I´m on a theoreticaly fixed version, 15.1.5.1 but I am indeed seeing those entries in the log. Just restarted the ASM proccess and it is working fine now....