Bug ID 526104: Failure to update IP reputation database due to SSL certificate validation error

Last Modified: Apr 28, 2025

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3

Fixed In:
12.0.0

Opened: Jun 02, 2015

Severity: 2-Critical

Symptoms

IP reputation database have stopped being updated automatically due to certificate renewal for vector.brightcloud.com. The new certificate was signed by the CA certificate not included in the default CA bundle on the BIG-IP.

Impact

IP reputation database could get outdated.

Conditions

IP reputation feature enabled.

Workaround

Add a new CA certificate to the default CA bundle manually.

Fix Information

The missing CA certificate has been added to the default CA certificate bundle on the BIG-IP.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips