Missing configuration on GUI after updating WAF signatures on ADC.

Missing configuration on GUI after updating WAF signatures on ADC.

book

Article ID: CTX582453

calendar_today

Updated On:

Description

WAF was enabled, and after updating the RFC Compliance / security signatures the configuration (ns.config) was wiped.

Resolution

There is a setting that needs to be changed, if the value for the parameter 'skip_systemaccess_policyeval' is set to 0, it will evaluate the polices against the ADC page, if set to '1' will ignore the ADC pages on the signature analysis

From shell to view the parameter skip_systemaccess_policyeval's current value, execute the following commands from Command Line Interface (CLI) on the ADC:
  1. shell
  2. nsapimgr -d allvariables | grep -i skip_systemaccess_policyeval

You can change it from shell with the command:
  • nsapimgr_wr.sh -ys skip_systemaccess_policyeval=1
And validate the change with the command mentioned above.

Problem Cause

Signatures block ADC GUI web access configs, like Virtual servers or IPs not presenting or not accessible, but are visible from CLI and on the ns.conf file.