Bug ID 1027601: AFM IP Error Checksum and Bad TCP Checksum vectors not supported

Last Modified: Nov 22, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Opened: Jun 21, 2021
Severity: 3-Major

Symptoms

AFM does not report IP Checksum and Bad TCP Checksum vector attacks because these signatures are dropped in the SmartNIC hardware as malformed packets.

Impact

SmartNIC drops the packets and they are not reported by AFM.

Conditions

-- BIG-IP Virtual Edition running on a device with a SmartNIC -- AFM provisioned and configured to detect IP Checksum and Bad TCP Checksum vectors.

Workaround

None

Fix Information

None

Behavior Change