Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP PEM
Known Affected Versions:
11.4.0, 11.4.1
Fixed In:
11.5.0, 11.4.1 HF2
Opened: Aug 24, 2013 Severity: 3-Major Related Article:
K14957
An LTM policy can become non-functional when its complexity increases, though there are various factor that determine a policies complexity, the may cause is when it contains many rules that have no overlapping conditions. Conditions overlap when they share the same type of condition on the same operand, e.g. when they both have 'http-host ends-with' or 'http-uri starts-with'.
The policy becomes non-functional.
When the complexity increases, the policy ceases to execute and it appear that no rule ever matches and no action is ever executed.
None.
Improvement to allow more rules and bigger state-machines to ensure CPM functions as designed after policy update.