Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.0, 12.1.1, 12.1.2
Fixed In:
13.0.0, 12.1.3
Opened: Sep 27, 2016 Severity: 2-Critical
Deleting a URL causes an incorrect event to be generated and logged for every other URL in the Policy. When a policy has many URLs configured, deleting a URL takes a long time and consumes heavy CPU time.
1) GUI is slow to delete URLs 2) Misleading (incorrect) logs are present in the audit log for each other URL in the system after a URL delete. 3) CPU can spike to 100%
Many URLs are configured in the Policy. This can be due to Policy Builder being set to "Always" learn new HTTP URLs. If Policy Builder is also configured to collapse common URLs to wildcards, then it deletes the collapsed urls and these calls can be resource intensive.
A) Change "Learn New HTTP URLs" mode to "Selective" from "Always" B) Disable collapse URLS.
URL delete no longer incorrectly generates an event for every other URL in the system.