Operational Defect Database

BugZero found this defect 150 days ago.

F5 | 1400337

GTP compliances are deprecated after BIG-IP version upgrade

Last update date:

4/26/2024

Affected products:

BIG-IP

BIG-IP AFM

Affected releases:

17.1.0

17.1.0.1

17.1.0.2

17.1.0.3

17.1.1

17.1.1.1

17.1.1.2

17.1.1.3

Fixed releases:

No fixed releases provided.

Description:

Severity: 3-Major ... Symptoms ... After upgrade from BIG-IP 17.1.0.1 to higher versions (like 17.1.0.2 or 17.1.0.3) below compliances are deprecated with "action" configured other than default value: gtp_allowed_apns gtp_disallowed_apns gtp_disallowed_imsi This issue is not encountered when directly installing BIG-IP 17.1.0.2. ... Impact ... These compliances are removed and cannot be used. ... Conditions ... - BIG-IP 17.1.0.1 is installed - Create a protocol inspection profile with GTP compliance. - Change action for gtp_allowed_apns, gtp_disallowed_apns and gtp_disallowed_imsi other than default value and commit these changes. - Upgrade to BIG-IP 17.1.0.2 or other higher versions. - Deprecated becomes "yes". ... Workaround ... If the active version on BIG-IP 17.1.0.2 with an IPS Profile created, then do the following: 1) Change the Action to default "Don't Inspect" for all 3 affected compliances in profile and commit the changes. ... 2) Install BIG-IP 17.1.0.2. 3) Upgrade to BIG-...

Additional Resources / Links

Share:

BugZero® Risk Score

What's this?

Coming soon

Status

New

Learn More

Search:

...