Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

ASM marks the security policy as modified

Hello

i restored A UCS file to our backup site, but there is online virtual servers, so i exported the asm polices that related to online virtual servers before the restore, then i imported them, but i notice that all imported polices needs to be applied (), so is there any way to apply them from CLI instead of manually one by one.

Image Text

Thanks

1
Rate this Question
Comments on this Question
Comment made 2 months ago by mplaksin 168

I think that UCS includes ASM policies but in https://support.f5.com/csp/article/K13945 says that first you have to provisioning ASM. I not sure if that answer your question.

0
Comment made 2 months ago by Mohanad 172

i meant if you made a change on a security policy add parameter, URL etc... you have to press "apply policy button" to take effect right? i want to know how to do it via CLI

Image Text

0
Comment made 2 months ago by Mohanad 172

https://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote-bigip-ve-13-1-0.html

Security policy status after UCS installation After you install a .ucs (user configuration set) file that was exported from version 10.1.0 or later, the system does not automatically apply changes that you made, but did not apply, to the security policies. The system enforces the web application according to the settings of the last set active security policy. However, the system preserves any changes to the current edited security policy, and marks the security policy as modified [M] if the changes have not been applied.

but i already applied the changes before i exported them.

0

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

I think that UCS includes ASM policies but in https://support.f5.com/csp/article/K13945 says that first you have to provisioning ASM. I not sure if that answer your question.

0
Comments on this Answer
Comment made 2 months ago by Mohanad 172

i found the command:

publish asm policy [name of the policy]

0