Last Modified: Nov 25, 2025
Affected Product(s):
BIG-IP AFM, Install/Upgrade
Known Affected Versions:
17.1.3
Opened: Nov 10, 2025 Severity: 2-Critical
After an upgrade, disabled hardware DOS vectors may use old values.
DOS thresholds may be incorrectly set or set too low resulting in packet loss that causes poor throughput.
-- F5OS tenant -- Upgrade -- AFM provisioned
Disable and re-enable the disabled DOS vectors. Log into the BIG-IP GUI and navigate to Security ›› DoS Protection : Device Protection Filter attack vectors: tcp click the "Network" text Enable all the disabled vectors by clicking on the vector name and changing state from "disabled" to "mitigate". Then disable the vectors by clicking on the vector name and changing state from "mitigate" to "disabled".
None