Bug ID 2144577: Lack of config validation with allow-ip-addresses of SAAS BD profile for unsupported address notation (CIDR notation)

Last Modified: Nov 25, 2025

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
17.1.2.1, 17.1.2.2, 17.1.3

Opened: Nov 07, 2025

Severity: 3-Major

Symptoms

The SAAS BD profile does not support CIDR notation for allow-ip-addresses (e.g., 10.10.10.10/32 or 10.10.10.0/24). It only supports individual host addresses without a prefix (e.g., 10.10.10.10). Lack of validation ends up TMM failing initializing SAAS hudfilter that causes traffic.

Impact

TMM fails to initialize the SAAS hudfilter and disrupts traffic.

Conditions

- SAAS BD profile - Configure CIDR address to allow-ip-addresses

Workaround

Refrain adding CIDR address to allow-ip-addresses

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips