Bug ID 741993: The BIG-IP system does not answer the request matching L7 policy that disabled DOSL7 when BADOS configured.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4

Fixed In:
14.1.0, 14.0.0.5, 13.1.1.4

Opened: Aug 29, 2018

Severity: 3-Major

Symptoms

The BIG-IP system does not answer the request matching the L7 policy that disabled DOSL7 when BADOS is configured. The connection hangs.

Impact

Connection hangs.

Conditions

1. Create a DoS profile Behavioral & Stress-based (D)DoS Detection. 2. Create an L7 policy to disable DoS profile (even on all URLs). 3. Attach both to a virtual server. 4. Send a request to the virtual server.

Workaround

There is no workaround other than disabling the Behavioral & Stress-based (D)DoS Detection from the DoS profile.

Fix Information

The system now correctly handles a disabled DOSL7 policy.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips