Bug ID 585946: ASM Disallowed Geolocations without a full country name known to BIG-IP are lost on update.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP ASM, BIG-IQ(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Apr 07, 2016

Severity: 3-Major

Symptoms

The mapping of country codes to their names that ASM REST and GUI use is not updated when the GeoIP database is updated, and some values are missing. These country codes can still be added to the list of disallowed locations directly when viewing a request, but do not show up in the GUI or REST. On a subsequent update, country codes are then lost.

Impact

Traffic from the affected disallowed Geolocations are longer blocked.

Conditions

A country code whose full country name mapping is missing from ASM is added to the list of disallowed Geolocations from the Request Log. The GUI or REST interface is then used to update the list of disallowed geolocations.

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips