Bug ID 537023: Config Sync will fail with the message system url filter cannot be modified

Last Modified: Jul 13, 2024

Affected Product(s):
BIG-IP SWG(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
12.0.0

Opened: Aug 01, 2015

Severity: 3-Major

Symptoms

Config Sync will fail with the following error message: Configuration error: system filter (/Common/allow-all) is part of system configuration, so it cannot be modified

Impact

Config sync fails.

Conditions

It is not known all of the conditions that trigger this, but it was discovered in a configuration containing an apm rule in urldb_base.conf: apm url-filter allow-all { }

Workaround

None - resetting device trust and re-establishing the device group may cause the problem to correct itself.

Fix Information

Fix the validation for url filter correctly, so that validation logic is skipped during config sync.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips