Bug ID 495023: packets from whitelisted IP address are dropped if present in Shun list and dos.spvabl.checkdynamicwl is false

Last Modified: Oct 06, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Fixed In:
12.0.0

Opened: Dec 06, 2014
Severity: 4-Minor

Symptoms

Packets from a whitelisted IP address are dropped.

Impact

Packets from a whitelisted IP are dropped unexpectedly.

Conditions

This can occur if the DB variable dos.spvabl.checkdynamicwl is set to false and the same ip address is present in both shun categories marked to be dropped and ip-intelligence whitelist.

Workaround

Always have the sys db "dos.spvabl.checkdynamicwl" value as true which is the default value

Fix Information

None

Behavior Change