Bug ID 479450: SSL traffic is not forwarded to destination

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP PEM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10

Fixed In:
11.6.0 HF4

Opened: Sep 15, 2014

Severity: 2-Critical

Related Article: K16766

Symptoms

SSL traffic is not forwarded to the backend server.

Impact

The impact of this issue is that SSL traffic is interrupted (flows are dropped).

Conditions

This issue occurs when SSL session reused is enabled (which is standard behavior).

Workaround

Remove the _sys_CEC_SSL_client_policy policy from the SSL VS.

Fix Information

Bug fix in classification library that caused SSL traffic not to be forwarded to the destination.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips