For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jk20004_44080's avatar
jk20004_44080
Icon for Nimbostratus rankNimbostratus
Sep 17, 2015

how to find reason for Access encountered error: ERR_ARG

we have thousands of messagex like this in the apm log

err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_sanitize_portal_headers, Line: 13994
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_forward_request_to_portal, Line: 14074
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_process_state_client_enforce_session, Line: 6601
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: hud_access_handler, Line: 2517
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_sanitize_portal_headers, Line: 13994
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_forward_request_to_portal, Line: 14074
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: access_process_state_client_enforce_session, Line: 6601
err tmm3[18077]: 01490514:3: 00000000: Access encountered error: ERR_ARG. File: ../modules/hudfilter/access/access.c, Function: hud_access_handler, Line: 2517

i found informations in devcentral for SharePoint, Exchange and SAML and yes we use all of them. any idee how to find the corresponding apm session? we are on a production system so tcpdump will not this easy.

application delivery
BIG-IP Access Policy Manager (APM)
deployment
LTM
microsoft
security

3 Replies

  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Sep 17, 2015
    I think it's not possible to link those message to specific sessions or connections. Have you opened a support case by F5? They are either a (or many) bug. F5 argues sometimes for such message, it's due to "malformed" http requests. If so, they should do a better logging of the error.
  • jk20004's avatar
    jk20004
    Icon for Cirrus rankCirrus
    Sep 17, 2015
    it is a SAML Problem Reset cause: BIG-IP: [0x1e6df3c:2666] Access encountered an error (Illegal argument)
  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Sep 18, 2015

    We cant say it is specefic to a sessions or connections. I guess these are raised because of the http error or malformed packets. You can just ignore them as it wont harm any of your sessions or connections.

     

    BTW, if you really need to understand these, better raise a support ticket and get official confirmation.

     

    -Jinshu