Bug ID 666689: Occasional "profile not found" errors following activate access policy

Last Modified: Oct 16, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3

Fixed In:
13.1.0, 13.0.1, 12.1.3.2

Opened: May 25, 2017

Severity: 3-Major

Symptoms

Immediately following the applying of a modified access policy it is possible for some profiles to disappear. It is transient and within a minute or two the profiles are available again.

Impact

Some authentication attempts fail while the lists get rebuilt. Retrying the authentication a minute or two later succeeds.

Conditions

Clicking "apply access policy" in the GUI or using tmsh to increment snapshot ids will clear the list of profiles and policies and then rebuild those lists. Authentication requests using profiles or policies not yet rebuilt returned the "profile not found" error.

Workaround

Retry the authentication.

Fix Information

Applying Access Policies in APM is improved to avoid a short dead time between when the old policies are removed and the new policies are activated.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips