Bug ID 1113161: After upgrade, Learning and Blocking Settings page is not loading because some policies are still pointing to deleted factory Negsig sets

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP ASM, Install/Upgrade(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 17.0.0, 17.0.0.1, 17.0.0.2

Fixed In:
17.1.0, 16.1.4, 15.1.9

Opened: Jun 09, 2022

Severity: 2-Critical

Symptoms

Learning and Blocking Settings page is not loading

Impact

When trying to open "Security ›› Application Security : Policy Building : Learning and Blocking Settings" page, GUI is stuck on 'loading' status

Conditions

Some policies are using factory sets which were deleted in later versions, and an upgrade was performed.

Workaround

Run this mysql in the BIG-IP in order to fix the database, it will remove all unreferenced policy sets from the system: mysql -p`perl -MF5::Cfg -e 'print F5::Cfg::get_mysql_password(user => q{root})'` -e "delete from PLC. PL_POLICY_NEGSIG_SETS where set_id not in (SELECT set_id from PLC.NEGSIG_SETS);"

Fix Information

After the fix, the 'Learning and Blocking Settings' page will be loaded with no error.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips