Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP SWG
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1
Fixed In:
14.1.0, 14.0.0.5, 13.1.1.2
Opened: May 18, 2018 Severity: 3-Major
When a per-request policy's Category Lookup agent queries Standard Categories with an expired SWG/URLF license (and has 'RST on failure' disabled), the execution always ends with the following log messages: Error: Global concurrent url filter session limit reached The connection is aborted.
Even if 'RST on failure' is disabled, traffic cannot reach the allow ending successfully.
Category Lookup agent set to query the urldb engine (standard categories) with either no SWG/URLF license or an expired license.
Remove the Category Lookup with standard category lookup from the per-request policy if the licenses do not allow for its use.
The allow ending is now reached successfully and does not error out if Category Lookup fails due to licensing errors but is set to disable 'RST on failure'.