Bug ID 657925: Error when enabling ASM via iRule

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3

Fixed In:
13.1.0, 13.0.1

Opened: Apr 11, 2017

Severity: 2-Critical

Related Article: K33646141

Symptoms

The following error occurs in tmm log err tmm3[26234]: 01220001:3: TCL error: /Common/irule_switch <HTTP_REQUEST> - while executing "ASM::disable".

Impact

Getting dropped request.

Conditions

Enabling or disabling ASM using an iRule, for example, using an iRule similar to the following: when HTTP_REQUEST { ASM::disable if { ([IP::local_addr] equals "1.1.1.1") } { ASM::enable /Common/http_asm_policy log local0. "1 access" } elseif { ([IP::local_addr] equals "1.1.1.2") } { ASM::enable /Common/http_asm_policy_2 log local0. "2 access" } }

Workaround

None.

Fix Information

Better handling of enable/disable ASM policy via an iRule.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips