Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
13.0.0, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
13.0.0 HF1
Opened: Jan 12, 2017 Severity: 2-Critical
During a failover event, a newly active BIG-IP will generate its own Dynamic Signatures rather than use a copy of the previous Active unit's signatures.
During failover events, there will be a lag of a few seconds while the Dynamic Signatures are generated and collated.
HA configuration with Dynamic Signatures enabled.
1. Use the following command to verify that the device-group is set to none: list sys folder dos-common 2. If it is, you can associate dos-common to device group dos-global-dg using the following command: tmsh modify sys folder dos-common/ device-group dos-global-dg 3. Save the config using the following command: tmsh save sys config
The system now explicitly adds folder and device group association, so the issue no longer occurs.