Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6
Fixed In:
16.1.0, 16.0.1.1, 15.1.0.5, 14.1.2.7, 13.1.3.5
Opened: May 30, 2018 Severity: 3-Major
The system does not always show violations in request log when post request is large.
Although the violations is handled correctly, it is not reported.
A large post request with many parameters is sent.
Disable learning mode. The internal parameter pb_sampling_high_cpu_load can define what is seen as high CPU load above which sampling does not take place. The default is 60. -- Using a lower value reduces the chances of sampling data. -- Using 0 makes sampling never happen and thus this issue does not occur (this slows down automatic policy building).
None