Symptoms

Immediately following the applying of a modified access policy it is possible for some profiles to disappear. It is transient and within a minute or two the profiles are available again.

Impact

Some authentication attempts fail while the lists get rebuilt. Retrying the authentication a minute or two later succeeds.

Conditions

Clicking "apply access policy" in the GUI or using tmsh to increment snapshot ids will clear the list of profiles and policies and then rebuild those lists. Authentication requests using profiles or policies not yet rebuilt returned the "profile not found" error.

Workaround

Retry the authentication.

Fix Information

Applying Access Policies in APM is improved to avoid a short dead time between when the old policies are removed and the new policies are activated.

Behavior Change