Bug ID 492936: Request blocked by wrong ASM policy.

Last Modified: Dec 07, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Opened: Nov 25, 2014

Severity: 3-Major

Symptoms

If ASM is sending traffic to a virtual server that is associated with an ASM policy configured in transparent mode, you see blocking pages from a different security policy.

Impact

Requests are handled by wrong ASM policies

Conditions

When adding an inactive policy directly from "/config/bigip.conf" + 'tmsh load sys config' - this is not propagated to ASMConfig.

Workaround

This basically detaches the policies from ltm virtual and attaches them back again

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips