Bug ID 1027601: AFM IP Error Checksum and Bad TCP Checksum vectors not supported

Last Modified: Oct 12, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Opened: Jun 21, 2021

Severity: 3-Major

Symptoms

AFM does not report IP Checksum and Bad TCP Checksum vector attacks because these signatures are dropped in the SmartNIC hardware as malformed packets.

Impact

SmartNIC drops the packets and they are not reported by AFM.

Conditions

-- BIG-IP Virtual Edition running on a device with a SmartNIC -- AFM provisioned and configured to detect IP Checksum and Bad TCP Checksum vectors.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips