Bug ID 461949: Virtual server with Portal Access and DOS profile resets connection

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4

Fixed In:
11.6.0 HF5

Opened: May 13, 2014

Severity: 2-Critical

Related Article: K16431

Symptoms

Virtual server resets connection.

Impact

The system posts an error similar to the following: err apd[4646]: 01490000:3: AccessPolicyD.cpp func: 'process_request()' line: 736 Msg: EXCEPTION AccessPolicyD.cpp line:653 function: process_request - error 4 reading/parsing response from socket.

Conditions

Requests are dropped on a virtual server that meets all of the following criteria: -- APM Access Policy. -- DOS Profile with Application Enabled. -- SSL profile on serverside.

Workaround

Either disable the DOS profile on the virtual server, or disable the SSL profile on the serverside.

Fix Information

Virtual server with Portal Access, DOS profile, and SSL profile configuration no longer resets connections.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips