Bug ID 442191: HTTP Class profiles globs are upgraded to a contains condition when it should be equals

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP ASM, Install/Upgrade, LTM, WAM(all modules)

Known Affected Versions:
10.2.4, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9

Fixed In:
11.6.0, 11.5.2, 11.4.1 HF9

Opened: Jan 06, 2014
Severity: 3-Major
Related AskF5 Article:
K15149

Symptoms

HTTP Class profiles globs are upgraded to a policy with a contains condition when it should be equals. The upgrade process will succeed, but the policy will not use the correct syntax.

Impact

After the upgrade to 11.4.x, The policy will match more than the HTTP Class profile did. Network traffic will be impacted.

Conditions

A UCS or config with HTTP Class profiles containing globs for matching must be applied to 11.4.0 or 11.4.1 to encounter this state. The UCS must be from 11.3.x or earlier.

Workaround

Manually modify policies with the incorrect condition after upgrading to 11.4.x.

Fix Information

The policy condition now converts properly from an HTTP class to an LTM policy and the ultimate behavior is identical to that of the previous release.

Behavior Change