Bug ID 773841: Per-request access policy may handle logon pages incorrectly

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1

Opened: Apr 18, 2019

Severity: 3-Major

Symptoms

If challenge-based authentication is used in per-request access policy, it may not show challenge page correctly.

Impact

User cannot authenticate.

Conditions

- per-request access policy with subroutine which includes logon page agent. - challenge-based authentication is configured, for example, with one-time passcode;

Workaround

None.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips