Last Modified: Jul 28, 2026
Affected Product(s):
BIG-IP (all modules)
Fixed In:
21.1.0.1, 21.0.0.3, 17.5.1.8, 17.1.3.4
Opened: Apr 27, 2026 Severity: 3-Major
When BIG-IP TMUI is configured with cert-LDAP authentication and OCSP validation, accessing the TMUI using Mozilla Firefox or Apple Safari browsers causes BIG-IP to send excessive OCSP requests to the responder approximately every 5 seconds.
This can overwhelm the OCSP responder and cause intermittent authentication failures or forced re-authentication on the TMUI.
This occurs when all of the following conditions are met: -- BIG-IP TMUI is configured with cert-LDAP authentication with OCSP validation enabled. -- The TMUI is accessed using Mozilla Firefox or Apple Safari browsers.
Use Google Chrome or Microsoft Edge to access the BIG-IP TMUI, as these browsers reuse TLS sessions and do not trigger frequent OCSP requests.
BIG-IP TMUI no longer sends excessive OCSP requests when accessed via Mozilla Firefox or Apple Safari browsers with cert-LDAP authentication and OCSP enabled.