Bug ID 529535: MCP validation error while deactivating a policy that is assigned to a virtual server

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Fixed In:
12.1.0, 11.6.1

Opened: Jun 24, 2015
Severity: 3-Major

Symptoms

When deactivating a security policy via REST, and the policy is assigned to a virtual server, then BIG-IP reports the following error: ---------------------------- "MCP Validation error - 01071726:3: Cannot deactivate policy action '/Common/<VS_name>'. It is in use by ltm policy '/Common/<L7_policy_name>'.", ---------------------------- However, the security policy becomes inactive and remains assigned to virtual server. This will cause the virtual server to stop processing network traffic, and there will be the following errors in 'bd.log': ---------------------------- BD_MISC|ERR |Jun 24 12:53:35.698|17566|src/acc_reject_policy.c:0165|Account id 10 has no reject policy configured. Cannot get data ----------------------------

Impact

An inactive security policy remains assigned to a Virtual Server

Conditions

ASM provisioned, with a security policy assigned to a Virtual Server, then the security policy is deactivated via the REST API

Workaround

Deactivate the security policy via GUI at: 'Security :: Application Security : Security Policies : Active Policies':

Fix Information

The deactivation of a security policy using the REST API now removes the association of the deactivated policy from the virtual server, resulting in no errors and consistent configuration state.

Behavior Change