Field Notice: FN - 72168 - BroadWorks HTTP Alias Redirected to the HTTP Server Name - Software Upgrade Recommended

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	19-Apr-21	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Application Patches	23.0	23.0.2021.03	Cisco BroadWorks Release 23
NON-IOS	Application Patches	24.0	24.0.2021.03	Cisco BroadWorks Release 24

Defect Information

Defect ID	Headline
CSCvx77893	BEMS01204291 Cluster FQDN redirection is redirecting on HTTP server name

Problem Description

With Cisco BroadWorks patch ap378863 applied, the HTTP redirection mechanism might be modified. When HTTP aliases are applied, the HTTP alias is redirected to the HTTP Server name instead of the HTTP Alias name.

Background

After applying ap378863, external HTTP requests might get redirected to nonroutable hostnames. This can cause failures of some or all HTTP services, mainly on the Xtended Services Platform (XSP).

The affected server must use HTTP aliases, and the HTTP Server name (as defined in the configuration) must be a nonroutable address from the public Internet for the problem to manifest.

Problem Symptom

Patch ap378863 might modify the HTTP redirection mechanism.

When HTTP aliases are defined, an HTTP request with a host header that contains an HTTP Alias cluster Fully Qualified Domain Name (FQDN) should be redirected to the HTTP Alias name. With ap378863 applied, the request is redirected to the HTTP Server name instead.

Note: Patch ap378863 for Release 22 is not affected by this problem.

Workaround/Solution

These Cisco BroadWorks patches must be applied in order to correct the issues.

Release 23

• BroadWorks Xtended Services Platform - AP.xsp.23.0.1075.ap379167
• BroadWorks Application Server - AP.as.23.0.1075.ap379167
• BroadWorks Profile Server - AP.ps.23.0.1075.ap379167
• BroadWorks Network Server - AP.ns.23.0.1075.ap379167

Release 24

• BroadWorks Application Server - AP.as.24.0.944.ap379167

BroadWorks patches can be downloaded through the Cisco Software Download Center after logging in with your Cisco.com (CCO) account.

The version of BroadWorks that is currently deployed as well as the patches currently activated can be checked by executing the get versions all command from the CLI. More information on how to check the patch level can be found in the Cisco BroadWorks Maintenance Guide.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.