Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

baek1986's avatar
baek1986
Icon for Nimbostratus rankNimbostratus
Jul 08, 2017

Migrating to F5, Cisco ACE options (syn-data and urgent-flag)

i am working on CISCO ACE migration. The ACE have two options.

 

parameter-map type connection TCP_MAP

 

syn-data drop

 

urgent-flag clear

 

I would like to know the options on F5 related its.

 

1 Reply

  • parameter-map type connection TCP_MAP
    is how Cisco ACE handles TCP parameters and the like. You would modify these through the TCP profile or by modifying other protocol profiles. You would then assign your custom profiles to the virtual server in question. Depending on the profile you can often have different profiles on the client side and the server side, which will help address the next two data points.

    syn-data drop
    and
    urgent-flag clear
    are both part of the tcp normalization in Cisco ACE. As the BigIP is a full proxy, they are not really applicable. We will construct a complete and separate TCP connection to the back end, which may or may not exactly match the client side connection. You can tweak your TCP settings through custom TCP profiles.