Bug ID 585946: ASM Disallowed Geolocations without a full country name known to BIG-IP are lost on update.

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP ASM, BIG-IQ(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Apr 07, 2016
Severity: 3-Major

Symptoms

The mapping of country codes to their names that ASM REST and GUI use is not updated when the GeoIP database is updated, and some values are missing. These country codes can still be added to the list of disallowed locations directly when viewing a request, but do not show up in the GUI or REST. On a subsequent update, country codes are then lost.

Impact

Traffic from the affected disallowed Geolocations are longer blocked.

Conditions

A country code whose full country name mapping is missing from ASM is added to the list of disallowed Geolocations from the Request Log. The GUI or REST interface is then used to update the list of disallowed geolocations.

Workaround

None.

Fix Information

None

Behavior Change