Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.0.0 HF2
Fixed In:
12.1.0, 12.0.0 HF3
Opened: Nov 13, 2015 Severity: 2-Critical
IHIS configured about 150K micro AFM rules. when they search rule from GUI, the GUI will lost connectivity and never come back, they have to restart tomcat to recover it.
GUI is unusable.
in AFM rule page, search any rule, after click "Search" button, GUI will be disconnected. from the tomcat debug log, periodically SQL executions could be founds, but no ending.
Improvements to mcp to optimize queries. Removed the expand all option for rule lists. Added option to disable stats from displaying on the active rules page
We added an option under Security :: Options : Network Firewall to disable statistics. For the IHIS config, the statistics need to be disabled. The "expand all" option for rule-lists in the Active rules page has been removed.