Bug ID 493524: ASM attack appear ongoing forever if restarting dosl7d during an attack

Last Modified: Oct 06, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
12.1.3, 12.1.2, 12.1.1, 12.1.0, 12.0.0

Opened: Nov 30, 2014
Severity: 3-Major


If dosl7d is restarted during an attack it doesn't write the "end attack" event to logdb.


Attack appears ongoing in Dos Overview page (even though it should be marked "ended").


Restarting dosl7d in the middle of an ASM attack (including actions that implicitly cause dosl7d restart like tmm restart or reboot).


No workaround.

Fix Information


Behavior Change