Bug ID 1234953: Apply Access Policy displayed on some existing Access Profiles after creating a custom HTTP auth agent

Last Modified: Dec 18, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4, 15.1.10.5, 15.1.10.6, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2

Opened: Feb 06, 2023

Severity: 5-Cosmetic

Symptoms

When you import an Access Policy that has an HTTP auth agent configured with "Custom Post" as "Authentication Type" and that Custom Headers are defined, or if you directly create such HTTP auth agent, existing Access Policies that also use an HTTP auth agent (a different one) will be shown as Yellow (implying that changes have to be applied).

Impact

It appears that some changes have been made to other Access Policies while this is not the case. Access Policies can safely be applied, no effective changes will be made.

Conditions

1) Import an Access Policy containing an HTTP auth agent or create an HTTP auth agent 2) the HTTP auth agent must be configured with "Custom Post" as "Authentication Type" and must use at least one custom header 3) There are existing Access Policies on the BIG-IP that are also using HTTP auth agents.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips