Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP AFM, Install/Upgrade
Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 15.0.0, 15.0.1
Fixed In:
15.1.0, 15.0.1.1, 14.1.4.3
Opened: Jun 19, 2019 Severity: 3-Major
IPS IM package installation fails. IPS log /var/log/pi_hitless_upgrade shows following message: Error during switching: unsupported type for timedelta seconds component: tuple.
IPS IM package is not installed.
-- IM package should contain compliance check related to a specific service (e.g., HTTP). -- At the time of IM package installation, there is an IPS profile with following parameters: + The 'auto-add-new-inspections' property set to 'on'. + Contains a service related to compliance checks, for example: * Presence on the following services causes an issue with the BIG-IP v14.1.0 IM: HTTP, SIP, IMAP * Presence on the following services causes an issue with the BIG-IP v15.0.0 IM: HTTP, SIP, IMAP, GTP, Diameter
1. Before IM package installation, set the profile property 'auto-add-new-inspections' to 'off' (disable). 2. Install IM package. 3. Manually add compliance checks from the IM package to profile. Compliance checks names appear similar to the following: -- pi_updates_14.0.0-20190607.2216.im -- pi_updates_14.0.0-20190607.2216.im
IM installation now succeeds when 'auto-add-new-inspections' is enabled on a profile.