Symptoms

Protected virtual servers with a monitoring/blocking application protection policy do not display enforcement mode following import from BIG-IP.

Impact

The virtual server will display 'Not Protected' enforcement status.

Conditions

1. On BIG-IQ discover a BIG-IP device with a protected virtual server. 2. Check the virtual server's enforcement mode in the L7 security grid (Monitoring > DASHBOARDS > L7 Security).

Workaround

PATCH the VS (or update it via UI), wait a minute and it will get the protection mode. For batch mode, restart restjavad, which marks all vips as dirty and protection mode will be recalculated for all of them.

Fix Information

Protected virtual servers imported from a managed BIG-IP device now display the correct enforcement mode.

Behavior Change