Bug ID 774881: Protocol Inspection profiles can be added to a virtual server without Protocol Inspection being licensed.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3

Fixed In:
15.1.0, 14.1.0.5

Opened: Apr 19, 2019

Severity: 3-Major

Symptoms

Protocol Inspection profiles can be added to a virtual server but are not applied to traffic. To add a Protocol Inspection profile now it is required to have an AFM standalone license or to have an add-on AFM license, which includes Protocol Inspection module. Otherwise a error message is shown.

Impact

It might appear that the configured Protocol Inspection profile attached to a virtual server or referenced in a firewall rule should work, but in fact, it is not applied to the actual traffic.

Conditions

-- AFM is licensed as an add-on module without Protocol Inspection feature. -- Protocol Inspection profile is configured and added to a virtual server or referenced in a firewall rule.

Workaround

None.

Fix Information

An error message is shown when trying to apply a Protocol Inspection profile to a virtual server or to a firewall rule having no Protocol Inspection license.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips