Bug ID 880753: Possible issues when using DoSL7 and Bot Defense profile on the same virtual server

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5

Fixed In:
16.0.0, 15.1.1, 15.0.1.4, 14.1.2.7

Opened: Feb 13, 2020

Severity: 3-Major

Related Article: K38157961

Symptoms

When DoSL7 and Bot Defense profiles are configured together on the same Virtual Server, some requests might not be handled by the Bot Defense profile.

Impact

Some requests might not be processed by the Bot Defense profile.

Conditions

-- DoSL7 profile is attached to the virtual server (with Application). -- Bot Defense profile is attached to the virtual server. -- Another security module is attached to the virtual server (WebSafe, MobileSafe, ASM).

Workaround

Disable dosl7.idle_fast_path: tmsh modify sys db dosl7.idle_fast_path value disable

Fix Information

The mechanism which caused this issue is now correctly enabled.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips