Bug ID 1017053: [SSL Orchestrator] Policy fails to complete when URL branching is configured

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP SSLO(all modules)

Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2

Fixed In:
17.0.0, 15.1.9

Opened: May 07, 2021

Severity: 3-Major

Symptoms

SessionDB returns ERR_NOT_FOUND when Allow Agent attempts to update URL info in the session entry.

Impact

This causes policy execution failure and connection aborts.

Conditions

SSL Orchestrator session does not have a session entry in the SessionDB corresponding to the URL info.

Workaround

Setting perflow.branching.url with no value, then the Allow Agent will not update the session entry. This will avoid the ERR_NOT_FOUND error message.

Fix Information

Ensure the session is an APM session before setting the URL info for the session entry.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips