Bug ID 1317325: [AFM] - iRule event "ACL::action allow" skip further events

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Opened: Jul 06, 2023

Severity: 4-Minor

Symptoms

ACL::action allow rule action works similar to an "Accept Decisively"/allow-final not considering drop actions specified in the AFM explicit FW rules.

Impact

AFM FW policy drop rules are not honored.

Conditions

Adding FW irules with "ACL::action allow" in conjunction with AFM FW policy rules with drop action.

Workaround

The same iRule actions can be achieved with FW policy rules.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips