Last Modified: Sep 27, 2024
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4
Opened: Oct 23, 2023 Severity: 3-Major
Two DoS vectors match the same type of traffic: -- Device: DNS Question Items != 1 -- Protection Profile: DNS QDCOUNT LIMIT If you have both of these DoS vectors configured, only the "DNS Question Items != 1" DoS vector is matched.
Only the "DNS Question Items != 1" alert is raised. Both of these DoS vectors have identical meanings internally, and so only "DNS Question Items != 1" will be triggered.
-- Both "DNS QDCOUNT LIMIT" and "DNS Question Items != 1" are configured. -- The DOS vectors are triggered
None
None