Bug ID 518197: Modifying the default antifraud profile causes device group sync failures

Last Modified: Oct 17, 2023

Affected Product(s):
BIG-IP All(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3

Opened: Apr 15, 2015

Severity: 2-Critical

Symptoms

A device group sync results in the following error: 01070700:3: The attributes of a root profile (/Common/antifraud) cannot be set to 'default'.

Impact

Sync fails and can be difficult to recover.

Conditions

The default /Common/antifraud profile is modified from its default values while in a device group.

Workaround

Don't modify the base profile; create a new one instead. Recovery could involve running SOL13887 against a peer with an unmodified base profile, but this will delete any changes made. If that is not an acceptable solution, you can tmsh save sys config, remove the /Common/antifraud profile from bigip.conf, then tmsh load sys config.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips