Symptoms

Packets from a whitelisted IP address are dropped.

Impact

Packets from a whitelisted IP are dropped unexpectedly.

Conditions

This can occur if the DB variable dos.spvabl.checkdynamicwl is set to false and the same ip address is present in both shun categories marked to be dropped and ip-intelligence whitelist.

Workaround

Always have the sys db "dos.spvabl.checkdynamicwl" value as true which is the default value

Fix Information

None

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips