Forum Discussion
Jul 24, 2017
If policies works the same way as iRules they would not be updated for existing sessions. When you disassociate the rule from the virtual server it might break the existing sessions and force clients to create new ones.
You could test this theory by updating the policy and try to test the rule in private mode on your browser, or try a different browser altogether.
If the theory is confirmed you can kill the connections manually instead of removing/re-adding the policy by running:
tmsh del sys connection cs-server-addr cs-server-port
This is much faster than what you do today.
/Patrik