Bug ID 761234: Changing a virtual server to use an address list should be prevented if the virtual server has a security policy with a logging profile attached

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 15.0.0, 15.0.1

Fixed In:
15.1.0, 15.0.1.1, 14.1.2.1

Opened: Mar 14, 2019

Severity: 3-Major

Symptoms

If you create a virtual server with a single address ('Host' in the GUI) for both its source and destination, then configure the virtual server's security policy with a logging profile, and then (after creating the virtual server) modify the source or destination to use a traffic matching condition, the system reports no error when updating the configuration.

Impact

An invalid configuration is not caught. When later loading the configuration, the system reports a validation error, and the configuration does not load.

Conditions

Attempting to use a virtual server with a security policy attached that uses a logging profile with an address list as the virtual server's source or destination.

Workaround

None.

Fix Information

An error is now generated under these conditions.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips