Last Modified: Apr 08, 2025
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.5.0
Opened: Feb 14, 2025 Severity: 3-Major
DOS tcp-ack-ts vector with tscookies option enabled is not compatible with fastl4 (L4) mirroring.
Existing connections hang due to tsval not being transformed properly on a newly active device.
- DOS tcp-ack-ts vector with tscookies option enabled - Mirroring configured on fastL4 TCP virtual. - FastL4 profile with timestamp 'preserve' option configured.
Set fastl4 timestamp option to strip/rewrite.
None