Symptoms

When a per-request policy has a syntax error when configured manually using advanced expressions, subsequent updates to per-request policies are not sent in the traffic plane, causing traffic to reset.

Impact

Any updates to per request policy won't reflect automatically on the active device, but will work on the failover device after config-sync.

Conditions

-- Found on 15.1.8 -- SWG is provisioned and a per-request policy is created -- Policy branch rules are configured manually (advanced expressions) and has syntax error previously

Workaround

Config-sync will trigger the control plane changes to be re-applied. Apply the changes on the active device, config-sync and force to standby. This will trigger changes on the peer device. Peer device is now active. Make any dummy change and config-sync again, this will make sure changes are applied on both boxes.

Fix Information

None

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips