Environment

Enterprise Server - all versions.

Situation

Access to a listener is not granted as expected. 
If the CIDR extension is not a multiple of 8 (i.e /21)  then the rule will not match to any incoming IP address. 
If formats are mixed then results can be unpredictable as per this example 

deny:**
allow:192.168.1.0/24

 

Resolution

This has been identified as a product issue, which will be addressed by defect OCTCR50A415106. 
To check the status of this defect, contact Customer Support.