Last Modified: Jun 05, 2024
Affected Product(s):
BIG-IP BIG-IQ, Install/Upgrade
Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1
Fixed In:
17.0.0, 16.1.2.2, 15.1.5.1, 14.1.4.6
Opened: Apr 19, 2021 Severity: 3-Major
The BIG-IP system is unable to deploy a revision of upgraded child policies and you see an error: Failed pushing changed objects to device <device>: Could not update the Section 'Threat Campaigns'. childInheritanceStatus is not compatible with parentInheritanceStatus.
This corruption impacts BIG-IQ interactions with the Child Policy and causes exported Child Policies to be incorrect.
-- An ASM Child Policy is present on the BIG-IP device in a version earlier than BIG-IP 14.0.0. -- The BIG-IP system is upgraded to BIG-IP 14.0.0 or later.
After upgrading to BIG-IP 14.0.0 or later, perform the following: 1. Log in to the BIG-IP Configuration Utility. 2. Go to Security :: Application Security :: Security Policies :: Policies List. 3. Select the first Parent Policy. 4. Go to Inheritance settings and change Threat Campaigns from None to Optional. 5. Click Save Changes. 6. Change Threat Campaigns from Optional back to None. 7. Click Save Changes. 8. Click Apply. 9. Repeat steps 3 to 8 for each additional Parent Policy.
Made childInheritanceStatus compatible with parentInheritanceStatus after the upgrade.