Last Modified: Mar 03, 2026
Affected Product(s):
BIG-IP SSLO
Known Affected Versions:
17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5
Opened: Feb 03, 2026 Severity: 3-Major
BIG-IP occasionally resets client connections, with the RST cause reported as "Detaching server side before server connect"
When the policy rejects the ClientHello due to the hostname, the connection ends up getting reset with the cause reported as "Detaching server side before server connect".
-- Explicit topology -- Policy with early reject -- The policy rejects on the ClientHello while the server-side TCP connection is being established
Enable the transparent virtual verified-accepted setting. This ensures that the server-side completes the three-way handshake before sending RST.
None