Bug ID 638838: Dynamic Signatures are not copied to peers in a device group

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
13.0.0, 13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,,,,, 13.1.4,, 13.1.5,

Fixed In:
13.0.0 HF1

Opened: Jan 12, 2017

Severity: 2-Critical


During a failover event, a newly active BIG-IP will generate its own Dynamic Signatures rather than use a copy of the previous Active unit's signatures.


During failover events, there will be a lag of a few seconds while the Dynamic Signatures are generated and collated.


HA configuration with Dynamic Signatures enabled.


1. Use the following command to verify that the device-group is set to none: list sys folder dos-common 2. If it is, you can associate dos-common to device group dos-global-dg using the following command: tmsh modify sys folder dos-common/ device-group dos-global-dg 3. Save the config using the following command: tmsh save sys config

Fix Information

The system now explicitly adds folder and device group association, so the issue no longer occurs.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips