OPERATIONAL DEFECT DATABASE
...
...
The 'SYN Challenge Handling' setting of a TCP profile can be reverted to defaults when a TCP profile is updated using the BIG-IP management GUI.
Loss of TCP profile syn challenge configuration settings
The SYN Challenge Handling settings of a TCP profile have previously been set to non-default values, and a configuration change is later made to the same TCP profile using the GUI.
In the GUI, specifically set the SYN Challenge Handling fields after making an update to other TCP profile fields, or use tmsh to make the changes instead SYN Challenge GUI Setting: Nominal TMSH: syn-cookie-enable enabled syn-cookie-whitelist disabled GUI Setting: Challenge and Remember TMSH: syn-cookie-enable enabled syn-cookie-whitelist enabled GUI Setting: Disable Challenges: syn-cookie-enable disabled syn-cookie-whitelist disabled
Now syn challenge handling setting isn't overwritten when tcp profile is updated
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
