Bug ID 720757: Without proper licenses Category Lookup always fails with license error in Allow Ending

Last Modified: Feb 15, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP SWG(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1

Fixed In:
14.1.0, 13.1.1.2

Opened: May 18, 2018
Severity: 3-Major

Symptoms

When a per-request policy's Category Lookup agent queries Standard Categories with an expired SWG/URLF license (and has 'RST on failure' disabled), the execution always ends with the following log messages: Error: Global concurrent url filter session limit reached The connection is aborted.

Impact

Even if 'RST on failure' is disabled, traffic cannot reach the allow ending successfully.

Conditions

Category Lookup agent set to query the urldb engine (standard categories) with either no SWG/URLF license or an expired license.

Workaround

Remove the Category Lookup with standard category lookup from the per-request policy if the licenses do not allow for its use.

Fix Information

The allow ending is now reached successfully and does not error out if Category Lookup fails due to licensing errors but is set to disable 'RST on failure'.

Behavior Change