Bug ID 1308673: ASM::unblock iRule is ignored for violation rating block reason

Last Modified: Dec 05, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4

Fixed In:
17.1.2

Opened: Jun 20, 2023

Severity: 2-Critical

Symptoms

Violation Rating is checked again on the response, where ASM::unblock irule has no effect, causing the request to be blocked (at response side).

Impact

Request is blocked (on the response side), even though ASM::unblock took place.

Conditions

-- WAF Policy is attached to the virtual server. -- ASM::unblock iRule is attached to the virtual server. -- Violation Rating violation is set to "block". -- A request reaches high violation rating threshold.

Workaround

None.

Fix Information

Ignore violation rating in response if all scores were given from request.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips