Bug ID 1107689: IPI is not dropping traffic from IPREP database malicious IPs

Last Modified: Jan 05, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6

Fixed In:
15.1.6.1

Opened: May 19, 2022
Severity: 2-Critical

Symptoms

IPI is unable to drop traffic when you send an attack using IPs from the IPREP list of IPs.

Impact

The packet is not dropped and mysql logs or network-ipi logs are not seen for such.

Conditions

-- IPI Subscription License installed

Workaround

No

Fix Information

IPI is now able to drop traffic from IPREP IPs, and the traffic drops are logged.

Behavior Change