Symptoms

System wide signature updates, like Attack Signature Update, can cause some security policies to erroneously change their enforcement of attack signatures to Transparent mode.

Impact

A security policy will not block attack signatures that are meant to be blocked.

Conditions

There are security policies in both Transparent and Blocking mode, and there is an update to the system's attack signatures.

Workaround

Toggle the transparent/enforce flag on a security policy, and apply the security policy.

Fix Information

We fixed an issue that caused false positives or a lack of enforcement (such as not blocking) when attack signatures were updated or modified.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips