Last Modified: Sep 27, 2019
See more info
Known Affected Versions:
14.1.0, 22.214.171.124, 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11, 18.104.22.168, 14.1.2, 15.0.0, 15.0.1
Opened: Sep 04, 2019
Per-request policy's incomplete-action 'Deny' does not take effect for HTTP-Connect request.
The BIG-IP system does not reject the HTTP-Connect request when incomplete-action is set to 'Deny'.
-- SSL Orchestrator (SSLO) or APM is licensed and provisioned. -- Per-request policy is created and attached to a virtual server. -- Incomplete Action value of per-request policy is set to 'Deny'.
Incomplete Action 'Deny' now takes effect for HTTP-Connect request.