Symptoms

After syncing an access policy, the access policy change on the other device should be prompting you to apply the policy, but instead it applies the policy automatically.

Impact

Policy changes are automatically applied, when they should only be synced with a prompt to apply after the sync.

Conditions

Two or more devices configured in a trust group, one device group is a failover device group, and one device group is a sync-only device group with automatic sync enabled. A key component that triggers this symptom is that the failover device group is listed first in the configuration. When this occurs, the policy will be applied automatically, which shouldn't occur.

Workaround

None.

Fix Information

After syncing an access policy, the access policy change on the other device in the trust group now prompts you to apply the policy, which is correct behavior.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips