Last Modified: Oct 15, 2025
Affected Product(s):
BIG-IP PEM
Known Affected Versions:
17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.5.0, 17.5.1, 17.5.1.2
Fixed In:
17.5.1.3, 17.1.3
Opened: May 02, 2025 Severity: 3-Major
When a PEM policy rule is configured to match the destination IP address and port, the message might match the source IP and port instead.
An incorrect policy rule might be matched
PEM policy rule is using flow conditions to match IP address and port
None
The PEM policy rule now correctly matches the source and destination IP addresses and ports when the flow condition is used.