Last Modified: Oct 21, 2026
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
17.1.3, 17.1.3.1, 17.1.3.2, 17.1.3.4, 17.1.3.5, 17.1.3.6, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9, 17.5.1.10, 21.1.0, 21.1.0.1, 21.1.0.2, 21.1.0.3
Opened: Oct 08, 2026 Severity: 4-Minor
If there is packet loss on the network, ICAP errors may appear in BD logs. The concurrent transaction count will also continually rise until the network issues resolve themselves. Minimal throughput from the BIG-IP is also expected as ASM holds the majority of incoming requests.
ICAP data may stop being sent to the ICAP server, resulting in transactions piling up in BD.
ASM is configured with an ICAP server that is actively being used for antivirus scanning during packet loss on the network.
Delete the affected / stalled connections via tmsh Disable GSO (generic-segmentation-offload) on the vlan towards the ICAP servers. OR Disable Anti-Virus Protection
None