Bug ID 821369: Incomplete Action 'Deny' does not take effect for HTTP-Connect

Last Modified: Jan 06, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,

Fixed In:

Opened: Sep 04, 2019
Severity: 3-Major


Per-request policy's incomplete-action 'Deny' does not take effect for HTTP-Connect request.


The BIG-IP system does not reject the HTTP-Connect request when incomplete-action is set to 'Deny'.


-- SSL Orchestrator (SSLO) or APM is licensed and provisioned. -- Per-request policy is created and attached to a virtual server. -- Incomplete Action value of per-request policy is set to 'Deny'.



Fix Information

Incomplete Action 'Deny' now takes effect for HTTP-Connect request.

Behavior Change