Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.0.0
Opened: Apr 30, 2017 Severity: 3-Major
Policy Builder creating 2 times more suggestions than entity limit.
When limit is reached Policy Builder doesn't accept anymore suggestions to add new entities - but creates 2 times more suggestions than limit (e.g. if default urls limit is 10,000 - after reaching entity limit up to 20,000 suggestions to add urls will be issued by pb).
When policy is configured to create many entities ('add all entities' to entity types other than filetypes).
Fix configuration so that the Policy Builder will not create so many suggestions: - use 'selective' or 'never' learning mode for most entity types - if there are many suggestions to create entities in 'selective' learning mode due to metachars or signatures, consider allowing metachars in global charset or disabling signatures for wildcard (or globally).
Policy Builder will now create 1.1 times more suggestions to create entities than the configured limit.