SFVH (SFOS 19.5.2 MR-2-Build624) New WAF bug throwing Error 404 on authentication

Question

When making any changes to a WAF rule, form based authentications will stop working and throw an error 404. When editing the affected authentication policy and saving the settings, which reloads WAF, the problem is gone. This can be reproduced on two firewalls in my lab and it happens every time, a WAF rule has been changed and appears to be a a new problem after upgrading to SFVH (SFOS 19.5.2 MR-2-Build624) . My WAF rules are being changed every night using the API to update the certificate, this is why I can 100% confirm, that this problem has not exist in the previous SFOS.

This thread was automatically locked due to age.

Vivek Jagad · Accepted Answer

Hello Saarbruecken , NC-119374 - this will be fixed in v19.5.3 MR-3 . As your case is with GES they'll help you further.

Saarbruecken · Answer

Thanks a lot, it appears to be working now. Hotfix tag: HF050823.1 console> system diagnostic show version-info

Hot Fix version: 2
Hotfix tag: HF050823.1

emmosophos · Answer

Hello Community, 
 This issue is being investigated under NC-119374 
 The RCA has been identified, and DEV is working on a fix. 
 Regards,

bobbylam · Answer

Hi Saarbruecken , even though this issue only impacts a very limited number of users (in specific configuration), we understand this is a big inconvenience for those impacted, so we have just released a hotfix which resolves the issue. If your device has hotfix enabled, it will automatically be downloaded & installed.

bobbylam · Answer

I suspect you're not experiencing the same problem which was fixed by the hotfix. 
 The issue fixed by the hotfix only applies to configurations where both basic & form based authentication are used across multiple WAF Locations, and would happen at random with users seeing a 404 error. 
 The issue also only affect v19.5.2, so downgrading to v19.5.1 would also resolve the issue. 
 With your issue, you're always getting Connection Refused and downgrading doesn't resolve it, so I believe it's a different issue.

Frederic Dzierzon · Answer

Hi, I stay on 19.5.1 and made a restore of the config and updated the certificates. Now it is running again... I will wait for some weeks. Many thanks for your help!

Vivek Jagad · Answer

Hello Saarbruecken ,

I guess we have a work around to fix your issue, seems similar to a known issue - NC-78563/NC-117603.
Would request you to log a service request and revert us with the service request number, I'll get this expedited for you.

Vivek Jagad · Answer

Hello Frederic Dzierzon , Under the SYSTEM > Backup & firmware > Firmware > Hotfix > ensure the option "Allow automatic installation of hotfixes." is ticked/enabled and hot apply, it will be applied automatically ! Additionally you can also check the status of the hotfix whether enable/disable/status in the console: console> system hotfix show Hotfix is enabled

SFVH (SFOS 19.5.2 MR-2-Build624) New WAF bug throwing Error 404 on authentication

Top Replies