IBM Support

IT14708: WHEN PROCESSING EMPTY BODIED RESPONSES ON SSL ENABLED XML FIREWALL APPLIANCE MAY EXPERIENCE CONNECTION FAILURES

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • When an XML Firewall is configured with SSL on the front side
    and the service receives an empty response body from the
    backend (ex. HTTP 304), the connection maybe terminated.
    

Local fix

  • Use Multi-Protocol Gateways in place of XML Firewalls.
    

Problem summary

  • Affected are customers using an XML Firewall configured with
    SSL on the front side (e.g. HTTPS Front Side Handler).
    
    If the service receives an empty response body from the backend
    (e.g. HTTP 304), established connections might get disrupted or
    even the whole appliance could become unstable.
    

Problem conclusion

Temporary fix

  • Use the Multi-protocol Gateway service instead of XML Firewall.
    

Comments

APAR Information

  • APAR number

    IT14708

  • Reported component name

    DATAPOWER

  • Reported component ID

    DP1234567

  • Reported release

    720

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-04-07

  • Closed date

    2016-07-25

  • Last modified date

    2016-07-25

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DATAPOWER

  • Fixed component ID

    DP1234567

Applicable component levels

  • R700 PSN

       UP

  • R710 PSN

       UP

  • R720 PSN

       UP

  • R750 PSN

       UP

  • R751 PSN

       UP

  • R752 PSN

       UP



Document information

More support for: IBM DataPower Gateways
General

Software version: 7.2

Reference #: IT14708

Modified date: 25 July 2016