Bug ID 748070: API Protection feature inadvertently allows editing of associated access policy

Last Modified: Apr 29, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,

Opened: Oct 26, 2018

Severity: 3-Major


This release contains a feature called API Protection. API Protection access policies are hidden from the user interface in most areas except the log settings area.


If the API protection policy / profile is modified outside of API Protection GUI, the 'Apply Access Policy' may become activated with no way to deactivate it.


Modifying API Protection access policy from Access :: Overview :: Event Logs :: Settings.


Navigate to the API Protection area and modify any part of the API Protection profile. This causes it to re-deploy, at which time the system clears the 'Apply Access Policy' prompt.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips