Bug ID 1352801: DNS lookups that are not required are invoked by the bot defense process

Last Modified: Jan 21, 2025

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4

Fixed In:
17.1.2

Opened: Sep 16, 2023

Severity: 3-Major

Symptoms

DNS lookups are invoked by advanced WAF without any relevant feature being turned on.

Impact

- Impacts performance. - Invokes DNS lookups that are not required.

Conditions

- Parameter data type is set to auto-detect (auto-detect will detect URI automatically). - A request contains a URI.

Workaround

Change the default wildcard parameter (or other relevant parameters) from auto-detect to another (usually alpha-numeric) option.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips