Bug ID 553131: ASM CMI: HA Pair returns to PENDING State after receiving a push with a new active policy

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP ASM, BIG-IQ(all modules)

Known Affected Versions:
12.0.0, 12.0.0 HF1, 12.0.0 HF2

Fixed In:
12.1.0, 12.0.0 HF3

Opened: Oct 18, 2015
Severity: 2-Critical

Symptoms

When a new active ASM Policy is synchronized across a manual sync device group, the receiving side erroneously marks the device group as needing to be synchronized again afterwards.

Impact

The device group appears to be out of sync when it is not.

Conditions

ASM Sync is enabled on a Failover device group with manual sync + incremental sync. A new active policy is created on the active device. The configuration is pushed to the peer.

Workaround

Another push will leave them in a synchronized state.

Fix Information

The device group now stays synchronized after the ASM configuration is loaded.

Behavior Change