Last Modified: Oct 19, 2025
Affected Product(s):
BIG_IP_NEXT(CM) TMOS
Fixed In:
20.3.0
Opened: Jun 07, 2024 Severity: 3-Major
For event logs associated with WAF policy which has "on-demand" learning mode - its suggestion details can include operations like Ignore and Delete, which should not be available in that case. Only Accept operation should be visible and available.
You cannot "undo" the operations in this scenario, the Accept Request case aims to let you perform the "Accept" operation only.
1. Configure WAF policy with "On-demand" learning mode and application attached to BIG-IP Next instance. 2. Run traffic which produces suggestion(s). 3. For the event of this traffic, open its details and press "Accept Request" button. 4. A table with at least one suggestion should appear. Click on on of the suggestions. 5. The suggestion details page appear with Ignore and Delete options.
Don't use the Ignore or Delete operations in suggestion details shown via Event logs details.
Delete and Ignore operations for Accept Request case are not visible.