Bug ID 821369: Incomplete Action 'Deny' does not take effect for HTTP-Connect

Last Modified: Sep 27, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 15.0.0, 15.0.1

Fixed In:
14.1.2.1

Opened: Sep 04, 2019
Severity: 3-Major

Symptoms

Per-request policy's incomplete-action 'Deny' does not take effect for HTTP-Connect request.

Impact

The BIG-IP system does not reject the HTTP-Connect request when incomplete-action is set to 'Deny'.

Conditions

-- SSL Orchestrator (SSLO) or APM is licensed and provisioned. -- Per-request policy is created and attached to a virtual server. -- Incomplete Action value of per-request policy is set to 'Deny'.

Workaround

None.

Fix Information

Incomplete Action 'Deny' now takes effect for HTTP-Connect request.

Behavior Change