Loading...
Loading...
A number of DoS vectors were added in version 17.1.0 and are set to Mitigate by default. The list of vectors that were added is described in K41305885: BIG-IP AFM DoS vectors https://my.f5.com/manage/s/article/K41305885 These include - TCP ACK (TS) - TCP ACK Flood - TCP Flags Uncommon Additionally, a DoS vector behavior has changed: - Bad TCP Flags Malformed
New DoS attack vectors may be detected. Since not all hardware platforms use hardware-accelerated DoS vectors, this can cause performance problems in the form of intermittent connectivity issues or application slowness that is noticed after the system is upgraded.
-- AFM enabled -- Upgrade to 17.1.x
None
None
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.