Bug ID 1284413: After upgrade to 16.1.3.2 from 16.0.1.1, BIG-IP can send CONNECT requests when no proxy select agent is used

Last Modified: Jul 24, 2024

Affected Product(s):
BIG-IP Install/Upgrade, LTM(all modules)

Known Affected Versions:
16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3

Fixed In:
16.1.5

Opened: Apr 04, 2023

Severity: 3-Major

Symptoms

BIG-IP uses a CONNECT to forward requests regardless of the PRP branch in use.

Impact

Requests fail intermittently

Conditions

-- Configure BIG-IP as Explicit Forward proxy with SSL Orchestrator or SWG. -- Configure an access policy and a prp and apply to the forwarding Virtual Server. -- In the PRP, use multiple branches where one branch contains a proxy select agent, and another branch does not.

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips