Forum Discussion

Piotr_Lewandows's avatar
Piotr_Lewandows
Icon for Altostratus rankAltostratus
Jun 28, 2018

ASM Application Security PolicyManual Configuration (Advanced)

Hi,

 

In 13.1.0.7 (I am not sure if it was the same in 13.1.4 but for sure not like that in 12.1.x) when security policy is applied via Security tab of VS configuration pop up allowing to disable or change policy is gone. Instead entry like that is presented:

 

Application Security PolicyManual Configuration (Advanced)

 

Why so? Is that some kind of weird improvement? With this change management becomes quite complicated:

 

  • There is no way to figure out which policy is attached to VS (except checking Resources > Policies section of VS)
  • There is no easy way to change or disable security policy (again Resources > Policies and detach Local traffic Policy pointing to security policy)

What is reason for this change, I can't see any benefits.

 

Piotr

 

application security policy
ASM Advanced WAF
assign to virtual
devops
local traffic policy
security
security policy

4 Replies

Sort By
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jun 28, 2018

    Are you seeing that with admin account?

     

    I still have the option in 13.1.0.1, and I don't think they would make a change like that in a point release.

     

  • Brandon's avatar
    Brandon
    Icon for Cirrostratus rankCirrostratus
    Jul 19, 2019

    Horrible !! If i get some resolutin or work around i'll post it

  • Romika's avatar
    Romika
    Icon for Nimbostratus rankNimbostratus
    Jul 14, 2020

    As per my understanding this will happen when there is more than one policy in the resources tab

  • Ivan_Chernenkii's avatar
    Ivan_Chernenkii
    Icon for Employee rankEmployee
    Jul 16, 2020

    Hello Piotr,

     

    "Application Security PolicyManual Configuration (Advanced)" message should be shown for VS only in case of you assign some predefined L7 policy with ASM in Resource tab.

    Could you remove all policies from Resource tab and then assign new policy from Security tab only?

     

    Thanks, Ivan