Bug ID 821369: Incomplete Action 'Deny' does not take effect for HTTP-Connect

Last Modified: Sep 23, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4

Fixed In:

Opened: Sep 04, 2019
Severity: 3-Major


Per-request policy's incomplete-action 'Deny' does not take effect for HTTP-Connect request.


The BIG-IP system does not reject the HTTP-Connect request when incomplete-action is set to 'Deny'.


-- SSL Orchestrator (SSLO) or APM is licensed and provisioned. -- Per-request policy is created and attached to a virtual server. -- Incomplete Action value of per-request policy is set to 'Deny'.



Fix Information

Incomplete Action 'Deny' now takes effect for HTTP-Connect request.

Behavior Change