Bug ID 722337: Always show violations in request log when post request is large

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6

Fixed In:
16.1.0, 16.0.1.1, 15.1.0.5, 14.1.2.7, 13.1.3.5

Opened: May 30, 2018

Severity: 3-Major

Symptoms

The system does not always show violations in request log when post request is large.

Impact

Although the violations is handled correctly, it is not reported.

Conditions

A large post request with many parameters is sent.

Workaround

Disable learning mode. The internal parameter pb_sampling_high_cpu_load can define what is seen as high CPU load above which sampling does not take place. The default is 60. -- Using a lower value reduces the chances of sampling data. -- Using 0 makes sampling never happen and thus this issue does not occur (this slows down automatic policy building).

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips