Bug ID 964625: Improper processing of firewall-rule metadata

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 16.1.2, 16.1.2.1

Fixed In:
17.0.0, 16.1.2.2, 15.1.6.1, 14.1.5

Opened: Nov 13, 2020

Severity: 3-Major

Symptoms

The 'mcpd' process may suffer a failure and be restarted.

Impact

-- MCPD crashes, which disrupts both control-plane and data-plane processing while services restart. -- Inability to configure firewall policy.

Conditions

Adding very large firewall-policy rules, whether manually, or from config-sync, or from BIG-IQ.

Workaround

Reduce the number of firewall policy rules.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips