Last Modified: Jun 19, 2025
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3, 16.1.3.4, 16.1.3.5, 16.1.4, 16.1.4.1, 16.1.4.2, 16.1.4.3, 16.1.5, 16.1.5.1, 16.1.5.2, 17.1.0, 17.1.0.1, 17.1.0.2, 17.1.0.3, 17.1.1, 17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2
Opened: Feb 23, 2025 Severity: 3-Major
After assigning a transparent DOS profile to a virtual server, the virtual server may suddenly stop processing traffic and will not respond to ARPs.
The virtual server stops accepting traffic (no route to host) due to ARP disabled
The DOS profile is applied via Security >> DoS Protection >> Protected Object
Manually enable ARP(and icmp-echo) on the virtual-address: #tmsh modify ltm virtual-address <ip address> arp enabled (icmp-echo enabled)
None