Last Modified: Jan 09, 2025
Affected Product(s):
BIG-IP APM
Known Affected Versions:
16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2
Opened: Oct 29, 2024 Severity: 2-Critical
If VPE agents contain syntax error, they are not triggered while saving the access policy, and a runtime error occurs when the policy is applied to network traffic. Tmm log: info tmm1[21588]: 01220002:6: Rule /Common/_sys_APM_Expression_Evaluation: syntax error in expression "[string tolower [mcget {perflow.branching.url}]] starts_with...": character not legal in expressions while compiling "expr {[string tolower [mcget {perflow.branching.url}]] starts_with \"<url>\" || [string tolower..." while compiling "return [ expr {[string tolower [mcget {perflow.branching.url}]] starts_with \"<url>\" || [strin..." (compiling body of proc "accessv2_proc2184", line 1) APM log: Per request access policy item (/Common/working_act_url_branching_perrq) from per request policy (/Common/working) not found.
You are able to save the policy that contains the syntax error, but tmm will log an error at runtime.
-- Per-request policy attached to a virtual server -- You make a change to the policy and the change contains a syntax error
None
None