Last Modified: Jan 14, 2026
Affected Product(s):
BIG-IP LTM, PEM
Known Affected Versions:
17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3
Opened: Oct 29, 2025 Severity: 1-Blocking
When the URL categorisation daemon (wr_urldbd) starts or restarts, it queries the DNS resolver for the Brightcloud online service domains that are used for some of the real-time URL queries, and populates the DNS Cache with the results. After populating the cache, it never refreshes or updates it. When Brightcloud change the DNS records of their service domains, all the new SSL handshakes from the URL categorisation daemon, needed for the real-time URL categorisation queries, fail with these errors in wr_urldbd.out: WR_URLDBD: Sep 30 12:01:08.836:Tid(41843):async_lookupCallback:702 Error processing URL:*.example.com and Status Code:S_ErrArg BC_SDK: 2025-09-30 12:01:08 ERROR: SslIO::StartSSLHandshake::SSL_connect() failed::SSL error: 1 BC_SDK: 2025-09-30 12:01:08 ERROR: SSL error: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed BC_SDK: 2025-09-30 12:01:08 ERROR: SslIO::StartSSLHandshake::SSL_connect() failed::SSL error: 1
Some time after the URL categorisation daemon starts or restarts, all URL categorisation real-time queries for URLs not already in the local database fail.
- URL categorisation license installed on the system, and URL categorisation configured and in use.
When the real-time queries start failing with the error described above, restart the wr_urldbd daemon with: "bigstart restart wr_urlrdbd"
None