Bug ID 1293261: Subviolations (e.g., IP in host header violation) are not reported to the policy builder

Last Modified: Dec 05, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.1.2

Opened: Apr 27, 2023

Severity: 4-Minor

Symptoms

Evasion Technique and HTTP Protocol Compliance subviolations (e.g., IP in host header violation) are not reported to the policy builder.

Impact

Learning suggestions to permanently disable the subviolation is not received.

Conditions

When the policy is set to only learn (alarm and block are turned off).

Workaround

A user should also enable the alarm to receive learning and suggestions for this subviolation.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips