Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP APM, SWG
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5
Fixed In:
15.0.0, 14.1.0.6
Opened: Mar 04, 2019 Severity: 3-Major
The BIG-IP system sends reset to client when Category Lookup agent is used in per-req policy.
Connection reset is seen on client from APM/SSLO box.
-- APM or SSLO is licensed and provisioned. -- URLDB and SWG are not provisioned. -- Category Lookup agent is used in the policy to process custom categories.
Modify Category Lookup agent 'lookup-type' property to 'custom-only' via TMSH, for example, by using a command similar to the following: modify apm policy agent category-lookup example_prp_act_category_lookup_ag lookup-type custom-only
Category lookup agent in per-req policy now successfully processes custom categories, so the reset no longer occurs.