Last Modified: Feb 07, 2024
Affected Product(s):
BIG-IP SSLO
Known Affected Versions:
16.1.1, 16.1.2, 16.1.2.1
Fixed In:
17.0.0, 16.1.2.2
Opened: Sep 20, 2021 Severity: 3-Major
Server-speaks-first traffic does not pass through BIG-IP SSL Orchestrator. BIG-IP does not do service chaining to the service that has port-remap enabled.
Connection does not succeed, client sees a reset after timeout.
- Interception Rule has verified accept enabled. - Security policy is service chaining and port-remap is enabled on one of the security services
Disable port-remap on service and redeploy.
Fix SSL Orchestrator connector to handle server-speaks-first traffic. After fix, server speaks first traffic will work even with port-remap enabled on the service.