Bug ID 503174: HSB Drops/leaks packets based on srcip only,

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Opened: Jan 27, 2015
Severity: 3-Major

Symptoms

Since the hardware drops packets only on source IP, in the case of leaked packets the system can't determine drops based on destination IP. For this reason, the system can only provide total packets dropped based on source IP.

Impact

Dstip stats in ip-intelligence-stats can be inconsistent

Conditions

HW accerlation of IP Intelligence auto blacklist/shun feature

Workaround

None

Fix Information

None

Behavior Change