Bug ID 1107689: IPI is not dropping traffic from IPREP database malicious IPs

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.6

Fixed In:
15.1.6.1

Opened: May 19, 2022

Severity: 2-Critical

Symptoms

IPI is unable to drop traffic when you send an attack using IPs from the IPREP list of IPs.

Impact

The packet is not dropped and mysql logs or network-ipi logs are not seen for such.

Conditions

-- IPI Subscription License installed

Workaround

No

Fix Information

IPI is now able to drop traffic from IPREP IPs, and the traffic drops are logged.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips