Bug ID 750683: REST Backwards Compatibility: Cannot modify enforcementMode of host-name

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM, BIG-IQ(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1

Fixed In:
15.0.0, 14.1.0.2

Opened: Nov 21, 2018

Severity: 2-Critical

Symptoms

Modifying the enforcementMode value fails with the following message: Valid Host Name already exists in this policy. In 14.1.0, the capability to treat specific domains as Transparent while the rest of the policy is in Blocking moved from Host Names to the new Microservices feature. The REST endpoint for Host Names (/mgmt/tm/asm/policies/<ID>/host-names) is meant to still support setting and modifying this attribute. However, this is not happening successfully.

Impact

The value change fails.

Conditions

-- Running version 14.1.0 software. -- Using a pre-14.1.0 REST API to modify the enforcementMode of a host name (/mgmt/tm/asm/policies/<ID>/host-names).

Workaround

You can use either workaround: -- Change the value using the GUI. -- Use the newer endpoint: (/mgmt/tm/asm/policies/<ID>/microservices).

Fix Information

Using the backwards compatible REST to update the enforcementMode of a host name now succeeds.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips