Bug ID 951113: ASM logging illegal events despite adding legal logging profile

Last Modified: Apr 11, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
12.1.5, 12.1.5.1, 12.1.5.2, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 16.0.0, 16.0.0.1, 16.0.1

Fixed In:
16.1.0, 16.0.1.1, 15.1.2, 14.1.3.1, 13.1.3.5, 12.1.5.3

Opened: Oct 05, 2020

Severity: 3-Major

Symptoms

When switching from "Log illegal requests" to "Log all requests" the security logging profile does not log legal requests.

Impact

"Log all requests" security logging profile does not log legal requests.

Conditions

ASM is provisioned.

Workaround

Before switching from "Log illegal requests" to "Log all requests" (or vice versa) switch to "none": ------------------------- # tmsh modify ltm virtual <Your_VS_Name> security-log-profiles replace-all-with { "Log illegal requests" } # tmsh modify ltm virtual <Your_VS_Name> security-log-profiles none # tmsh modify ltm virtual <Your_VS_Name> security-log-profiles replace-all-with { "Log all requests" } -------------------------

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips