Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.0, 12.1.1
Fixed In:
13.0.0, 12.1.2
Opened: Mar 21, 2016 Severity: 3-Major
When conditions of "Track Site Change" settings are met the staging flag on "*" entities is supposed to be turned ON in order to learn sub-sequences of site changes without blocking traffic. However it doesn't happen. The staging flag stays OFF.
in a situation when the protected Web application was changed, ASM can block traffic when it should not be blocked.
Staging was set OFF on "*" entity. After that conditions of "Track Site Change" settings are met.
Staging flag can be changed manually via GUI
The problem was a sub-sequence of other code changes. The code was fixed he way it should count for "Track Site Change" conditions and change Staging flag when it is needed.