Bug ID 880753: Possible issues when using DoSL7 and Bot Defense profile on the same virtual server

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5

Fixed In:
16.0.0, 15.1.1, 15.0.1.4, 14.1.2.7

Opened: Feb 13, 2020
Severity: 3-Major
Related Article:
K38157961

Symptoms

When DoSL7 and Bot Defense profiles are configured together on the same Virtual Server, some requests might not be handled by the Bot Defense profile.

Impact

Some requests might not be processed by the Bot Defense profile.

Conditions

-- DoSL7 profile is attached to the virtual server (with Application). -- Bot Defense profile is attached to the virtual server. -- Another security module is attached to the virtual server (WebSafe, MobileSafe, ASM).

Workaround

Disable dosl7.idle_fast_path: tmsh modify sys db dosl7.idle_fast_path value disable

Fix Information

The mechanism which caused this issue is now correctly enabled.

Behavior Change