Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP ASM, BIG-IQ
Known Affected Versions:
14.1.0, 14.1.0.1
Fixed In:
15.0.0, 14.1.0.2
Opened: Nov 21, 2018 Severity: 2-Critical
Modifying the enforcementMode value fails with the following message: Valid Host Name already exists in this policy. In 14.1.0, the capability to treat specific domains as Transparent while the rest of the policy is in Blocking moved from Host Names to the new Microservices feature. The REST endpoint for Host Names (/mgmt/tm/asm/policies/<ID>/host-names) is meant to still support setting and modifying this attribute. However, this is not happening successfully.
The value change fails.
-- Running version 14.1.0 software. -- Using a pre-14.1.0 REST API to modify the enforcementMode of a host name (/mgmt/tm/asm/policies/<ID>/host-names).
You can use either workaround: -- Change the value using the GUI. -- Use the newer endpoint: (/mgmt/tm/asm/policies/<ID>/microservices).
Using the backwards compatible REST to update the enforcementMode of a host name now succeeds.