Last Modified: Jul 28, 2026
Affected Product(s):
BIG-IP ASM
Fixed In:
21.1.0.1, 17.5.1.8, 17.1.3.4
Opened: May 18, 2026 Severity: 3-Major
Blocking for Violation Rating happens on response, instead of request
The request that has a flag alarm for SSRF is forwarded to the server-side
When you have the configuration below - Server-side access to disallowed host (Alarm) - Violation Rating Need Examination detected (Block)
Set Block on Server-side access to disallowed host violation
None