Last Modified: Sep 14, 2023
Affected Product(s):
BIG-IP PEM
Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4
Opened: Sep 20, 2017 Severity: 3-Major
Volume thresholds for the 2nd installed policy are ignored.
PEM respects volume threshold from the first evaluated action. Since the policy/rule evaluation order is not deterministic, the first evaluated action is not deterministic as well.
When a flow selects two Gx session reporting actions from two different rules with the same application filters and the same monitoring key, but volume thresholds configured from those policies are different.
Mitigation: Volume thresholds across rules with the same application and monitoring key when applied to the same subscriber, should be the same.
None