Bug ID 760410: Connection reset is seen when Category lookup agent is used in per-req policy

Last Modified: Mar 21, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM, SWG(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3

Opened: Mar 04, 2019
Severity: 3-Major

Symptoms

The BIG-IP system sends reset to client when Category Lookup agent is used in per-req policy.

Impact

Connection reset is seen on client from APM/SSLO box.

Conditions

-- APM or SSLO is licensed and provisioned. -- URLDB and SWG are not provisioned. -- Category Lookup agent is used in the policy to process custom categories.

Workaround

Modify Category Lookup agent 'lookup-type' property to 'custom-only' via TMSH, for example, by using a command similar to the following: modify apm policy agent category-lookup example_prp_act_category_lookup_ag lookup-type custom-only

Fix Information

None

Behavior Change