Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Opened: Aug 25, 2016 Severity: 4-Minor
When using BIG-IQ security 5.0 to manage the ASM devices and when trying to discover the ASM device, discovery fails. BIG-IQ resets the connection if it reaches the timeout.
REST call times out. From - /var/log/restjavad.0.log --------------- [SEVERE][4300][22 Aug 2016 14:25:10 UTC][com.f5.rest.workers.asm.AsmConfigWorker][logAsmWorkerException] nanoTime:[443782712039188] threadId:[18] Exception:[org.apache.thrift.transport.TTransportException ... at com.f5.asmconfig.ASMConfig$Client.recv_rest_call(ASMConfig.java:605) at com.f5.asmconfig.ASMConfig$Client.rest_call(ASMConfig.java:590) at com.f5.asmconfig.client.AsmClient.rest_call(AsmClient.java:61) at com.f5.rest.workers.asm.AsmConfigWorker.restCallWithRetry(AsmConfigWorker.java:131) at com.f5.rest.workers.asm.AsmConfigWorker.forwardCall(AsmConfigWorker.java:154) at com.f5.rest.workers.asm.AsmConfigWorker$1.run(AsmConfigWorker.java:111) ... at java.lang.Thread.run(Thread.java:744) ]client:[27708304] ---------------
ASM provisioned. Existing ASM policy contains a large amount of parameters. A REST GET call to retrieve all policies parameters at once.
REST clients should use paging and avoid retrieving all parameters at once. BIG-IQ, starting from 5.0.0, utilizes paging. To use paging, set the 'top' and 'skip' params in the REST GET: ------- https://localhost/mgmt/tm/asm/policies/<asm_plc_uuid>/parameters$top=<n1>&$skip=<n2> ------- As described in the "iControl REST User Guide": ------- https://devcentral.f5.com/d/icontrol-rest-user-guide-version-1150?download=true ------- At sections: - About query parameters - About paging properties - Paging through large collections
None