Bug ID 503174: HSB Drops/leaks packets based on srcip only,

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Opened: Jan 27, 2015

Severity: 3-Major

Symptoms

Since the hardware drops packets only on source IP, in the case of leaked packets the system can't determine drops based on destination IP. For this reason, the system can only provide total packets dropped based on source IP.

Impact

Dstip stats in ip-intelligence-stats can be inconsistent

Conditions

HW accerlation of IP Intelligence auto blacklist/shun feature

Workaround

None

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips