Bug ID 675236: 'Require consistent IP address' does not apply to some management GUI menu items

Last Modified: Mar 28, 2024

Affected Product(s):
BIG-IP APM, ASM, AVR(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Jul 23, 2017

Severity: 3-Major

Related Article: K03293523

Symptoms

The configuration setting 'System :: Preferences :: Require A Consistent Inbound IP For the Entire Web Session' ('sys http auth-pam-validate-ip' in tmsh) does not apply to some menu items, and acts as if the setting is enabled (that a consistent IP address is required) regardless of the BIG-IP configuration.

Impact

The 'sys http auth-pam-validate-ip' setting is ineffective on some menu items. These include ASM, AVR, and APM menu items.

Conditions

BIG-IP administrator accesses the configuration utility from more than one source IP address, using the same session cookie.

Workaround

Ensure the source IP address used when accessing the configuration utility does not change mid-session. This could happen if your management session is being load balanced across multiple HTTP proxies, for example.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips