Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP ASM
Known Affected Versions:
12.1.5, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 15.1.0, 15.1.0.1
Fixed In:
16.0.0, 15.1.0.2, 15.0.1.3, 14.1.2.5, 13.1.3.4, 12.1.5.1
Opened: Nov 17, 2019 Severity: 3-Major
-- The bd_agents stops sending the configuration in the middle of startup or a configuration change. -- The policy may be incomplete in the bd causing incorrect enforcement actions.
-- The bd_agent hangs or restarts, which may cause a complete ASM restart (and failover). -- A partial policy may exist in bd causing improper enforcement.
This is a rarely occurring issue, and the exact conditions that trigger it are unknown.
-- Unassign and reassign the policy. -- if unassign/reassign does not help, export and then reimport the policy.
Fixed inconsistency scenario between bd and bd_agent.