Bug ID 722337: Always show violations in request log when post request is large

Last Modified: Jul 29, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6

Opened: May 30, 2018
Severity: 3-Major

Symptoms

The system does not always show violations in request log when post request is large.

Impact

Although the violations is handled correctly, it is not reported.

Conditions

A large post request with many parameters is sent.

Workaround

Disable learning mode. The internal parameter pb_sampling_high_cpu_load can define what is seen as high CPU load above which sampling does not take place. The default is 60. -- Using a lower value reduces the chances of sampling data. -- Using 0 makes sampling never happen and thus this issue does not occur (this slows down automatic policy building).

Fix Information

None

Behavior Change