Symptoms

Modifying the enforcementMode value fails with the following message: Valid Host Name already exists in this policy. In 14.1.0, the capability to treat specific domains as Transparent while the rest of the policy is in Blocking moved from Host Names to the new Microservices feature. The REST endpoint for Host Names (/mgmt/tm/asm/policies/<ID>/host-names) is meant to still support setting and modifying this attribute. However, this is not happening successfully.

Impact

The value change fails.

Conditions

-- Running version 14.1.0 software. -- Using a pre-14.1.0 REST API to modify the enforcementMode of a host name (/mgmt/tm/asm/policies/<ID>/host-names).

Workaround

You can use either workaround: -- Change the value using the GUI. -- Use the newer endpoint: (/mgmt/tm/asm/policies/<ID>/microservices).

Fix Information

Using the backwards compatible REST to update the enforcementMode of a host name now succeeds.

Behavior Change