Layer7 API Management

I just started exploing policy manager 9.3 and came across the following error when adding Route via https:// assertion.

Please guide me 

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
<soapenv:Body>
<soapenv:Fault>
<faultcode>soapenv:Server</faultcode>
<faultstring>Policy Falsified</faultstring>
<faultactor>https://ec2-18-224-176-56.us-east-2.compute.amazonaws.com:8443/inbox</faultactor>
<detail>
<l7:policyResult status="Assertion Falsified" xmlns:l7="http://www.layer7tech.com/ws/policy/fault"/>
</detail>
</soapenv:Fault>
</soapenv:Body>
</soapenv:Envelope> 

Hi ,

Can you give us some more details , how did you setup the policy ? 

inbox is a service you have setup on the GW ? 

What other assertions are used in this policy , you can use the service debugger on the policy to check what is happening inside it, or check the ssg logs for a error.

Regards Dirk

Hi,

      You are right. Inbox is my service running in localhost:8080.

I couldn't find any specific reason for the failure of assertion in audit log/ debugger.

Please find the list of assertions i have used in the following order.

1.Audit message

2.Basic http authentication

3.Route via https

Note:

I am able to route the request to some other https/http url.say for example www.gooogle.com. But am getting this error when i change my target url to localhost.

Do i need to enable any security options ?

Thanks & regards,

Giridharan S

Tata Consultancy Services

Mailto: s.giridharan1@tcs.com

Website: http://www.tcs.com

Dear Giridharan_S ,

The error response just indicates an assertion in your policy failed at run time.

You will need to check audit event log, or ssg log for more details of the error.

Regards,

Mark

Hi 

If you refer to localhost in the route https assertions it means the service runs on the gateway ? 

So inbox is a service on your gateway ?

Regards 

Dirk  

HI ,

      Thanks for the response.

      Inbox is an endpoint of my service running in localhost(tomcat server). is that means service runs on my gateway?

if no, please guide to me on running services on gateway?

FYI, If i change target url to some other https for example www.google.com, am able to route the request through http route assertion. which means do i need to add my services with gateway?if so please let me know the steps to add services?

As of now i have installed policy manager only? do i need any other product for that?

Thanks,

Giridharan S

Tata Consultancy Services

Mailto: s.giridharan1@tcs.com

Website: http://www.tcs.com

Hi 

On which box runs this service  "localhost(tomcat server) " ?

Is this your local box or the server running the API gateway ?

If you specify a route as localhost the gateway thinks this is the local ip 127.0.0.1 

Dirk 

Hi,

        I think service runs in my local box.

So how should i specify the url? How do i differentiate 127.0.0.1?

Thanks & regards,

Giridharan S

Tata Consultancy Services

Mailto: s.giridharan1@tcs.com

Website: http://www.tcs.com

Hi

I would say you use the ip adress or hostname of your local machine where you have the inbox service running

Dirk

Good afternoon,

Were you able to resolve the issue? What was the final result?

Sincerely,

Stephen Hughes
Broadcom Support

Hi Stephen,

          I am able to route the request not. Thanks for the support.