Bug ID 657925: Error when enabling ASM via iRule

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3

Fixed In:
13.1.0, 13.0.1

Opened: Apr 11, 2017

Severity: 2-Critical

Related Article: K33646141


The following error occurs in tmm log err tmm3[26234]: 01220001:3: TCL error: /Common/irule_switch <HTTP_REQUEST> - while executing "ASM::disable".


Getting dropped request.


Enabling or disabling ASM using an iRule, for example, using an iRule similar to the following: when HTTP_REQUEST { ASM::disable if { ([IP::local_addr] equals "") } { ASM::enable /Common/http_asm_policy log local0. "1 access" } elseif { ([IP::local_addr] equals "") } { ASM::enable /Common/http_asm_policy_2 log local0. "2 access" } }



Fix Information

Better handling of enable/disable ASM policy via an iRule.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips