Bug ID 1211885: Zone Based DDoS upgrade fails from 15.1.8 to 15.1.8.1

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Fixed In:
17.1.0, 15.1.9

Opened: Dec 22, 2022

Severity: 4-Minor

Symptoms

If the protected zone feature is enabled and configured, when the BIG-IP is upgraded from 15.1.8 to 15.1.8.1, then the loading of the configuration will fail as the feature is disabled in the 15.1.8.1 build.

Impact

Upgrade from 15.1.8 to 15.1.8.1 will fail when the protected-zone object is provisioned in release 15.1.8 and the user upgrades to 15.1.8.1. Note: The variable dos.protectedzone will be enabled by default in future releases (17.1.0, 16.1.4, and 15.1.9). Upgrading to a future releases will be successful.

Conditions

Zone based DDoS feature enabled and provisioned on release 15.1.8.

Workaround

Enable the variable dos.protectedzone manually and reload the configuration. The protected-zone configuration will load successfully.

Fix Information

Enable the variable dos.protectedzone manually and reload the configuration. The protected-zone configuration will load successfully.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips