Bug ID 1991717: Upgrade fails from 17.5.0 to 17.5.1 if a shared object list is configured with Geo or FQDN's

Last Modified: Oct 17, 2025

Affected Product(s):
BIG-IP AFM, Install/Upgrade(all modules)

Known Affected Versions:
17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3

Opened: Jul 24, 2025

Severity: 3-Major

Symptoms

- Upgrade fails from 17.5.0 to 17.5.1 if a shared object list is configured with Geo or FQDN addresses.

Impact

Upgrade fails from 17.5.0 to 17.5.1 with the following error: Syntax Error:(/config/bigip_base.conf at line: 649) "geo" unknown property

Conditions

- AFM Provisioned on v17.5.0 - Configure a dns-resolver under global-fqdn-policy. - Configure a shared object list with a Geo or FQDN address. - Install 17.5.1 on a boot location. - Upgrade to 17.5.1

Workaround

- Identify the rules and the lists and comment them out of the bigip_base file that are involved in the firewall rules. - Upgrade to 17.5.1 or load the config again. or 1. Remove the shared objects address list from the AFM rules and then the shared objects address lists with Geo or FQDN addresses. 2. Once after an upgrade, add address list again to AFM rules and Geo or FQDN

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips