Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1
Fixed In:
15.1.0.2, 14.1.2.3, 14.1.0, 13.1.3.2
Opened: Aug 08, 2018 Severity: 3-Major
When using AWAF or MSP license, you cannot use the BIG-IP Configuration Utility to set rule to control ASM in an LTM policy.
Admin cannot use the BIG-IP Configuration Utility create LTM policy that controls ASM, and must use TMSH.
- AWAF or MSP license
Use TMSH to create the rule instead of GUI: For example: create ltm policy Drafts/test99 controls add { asm } requires add { http } rules add { rule1 { actions add { 0 { asm enable policy dummy2 }} ordinal 1 }}
Users can now create LTM rule in the BIG-IP Configuration Utility that controls ASM if have AWAF or MSP license.