Last Modified: Sep 24, 2024
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5
Opened: Aug 08, 2022 Severity: 3-Major
An ASM policy is suddenly detached from a virtual server and deactivated.
Inactive policy is synced to the peer, resulting in ASM being unassigned from the Virtual Server.
-- sync-only device group. -- ASM sync enabled. -- A policy is used on device ASM-A (attached to virtual server/device group). -- The same policy is not used on device ASM-B (not attached to virtual server/device group).
To prevent Policy Sweeper from deactivating any ASM policy, create a non-functioning device group and attach the unused ASM policies to that device group.
None