Bug ID 2687873: Invalid REST endpoint when DoS profile name contains an iApp folder separator (/)

Last Modified: Oct 22, 2026

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
17.5.1.3, 17.5.1.4, 17.5.1.5, 17.5.1.6, 17.5.1.8, 17.5.1.9, 17.5.1.10

Opened: Oct 16, 2026

Severity: 4-Minor

Symptoms

A DoS Protection profile can be created successfully inside an iApp application folder, but subsequent attempts to edit the profile through the GUI fail. The issue affects profiles whose names reference an existing iApp, such as "mytestApp.app/dosprotect1", when a DoS vector family (e.g. HTTP, SIP, Network or DNS) is associated during *initial profile creation*. Found unexpected URI tmapi_mapper/security/dos/profile/~Common~

Impact

GUI fails and not able to edit or modify DOs profile on any subsequent changes.

Conditions

1. Create a new empty iApp/application service with no template selected 2. Create a DOS protection profile and associated Dos vector family to it. 3. save/commit to create this DoS Protection profile. 4. Once DoS Protection profile is created, try to edit or perform some config changed (e.g. add some values into the Description field), 5. Try to save/commit this change and GUI fails.

Workaround

1. Create the DoS Protection Profile without a Vector Family selected. 2. Then select/add associate vector Family to it afterward

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips