Bug ID 816273: L7 Policies may execute CONTAINS operands incorrectly.

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,, 15.0.0, 15.0.1

Fixed In:

Opened: Aug 20, 2019

Severity: 1-Blocking


L7 Policies involving CONTAINS operands may execute incorrectly in some cases. The policy compiler may incorrectly combine some internal states, 'forgetting' degrees of partial evaluation of a CONTAINS operation.


The wrong policy actions may be triggered.


Multiple CONTAINS conditions are used on the same virtual server.


It may be possible to reorder the rules in a policy to restore correct operation. However, the more complex the policy, the less likely this is.

Fix Information

L7 Policy CONTAINS operations are compiled correctly. Policies with CONTAINS operations no longer trigger the wrong rule actions.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips