Bug ID 760410: Connection reset is seen when Category lookup agent is used in per-req policy

Last Modified: Sep 17, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM, SWG(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5

Fixed In:
15.0.0, 14.1.0.6

Opened: Mar 04, 2019
Severity: 3-Major

Symptoms

The BIG-IP system sends reset to client when Category Lookup agent is used in per-req policy.

Impact

Connection reset is seen on client from APM/SSLO box.

Conditions

-- APM or SSLO is licensed and provisioned. -- URLDB and SWG are not provisioned. -- Category Lookup agent is used in the policy to process custom categories.

Workaround

Modify Category Lookup agent 'lookup-type' property to 'custom-only' via TMSH, for example, by using a command similar to the following: modify apm policy agent category-lookup example_prp_act_category_lookup_ag lookup-type custom-only

Fix Information

Category lookup agent in per-req policy now successfully processes custom categories, so the reset no longer occurs.

Behavior Change