Last Modified: May 29, 2024
Affected Product(s):
BIG-IP AFM
Fixed In:
17.1.0
Opened: Sep 30, 2022 Severity: 4-Minor
The hardware mitigation was not proper due to spva ba_hit statistics not generated.
Attack traffic will get pass through because of ba_hit is not updating.
Configure BA with rate limits for ICMP vectors at virtual server level.
None
Neuron support is not available for ICMP packets, directly write rules into flow cache through which hardware can get entries.