Bug ID 767057: In a sync-only device group, inactive policy is synced to peer, ASM is removed from virtual server

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP ASM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,,,,, 13.1.4,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,, 15.0.0, 15.0.1,,,,

Fixed In:
15.1.0,, 13.1.5

Opened: Apr 01, 2019

Severity: 3-Major


An ASM policy is suddenly detached from a virtual server and deactivated.


Inactive policy is synced to the peer, resulting in ASM being unassigned from the Virtual Server.


-- sync-only device group. -- ASM sync enabled. -- A policy is used on device ASM-A (attached to virtual server/device group). -- The same policy is not used on device ASM-B (not attached to virtual server/device group).


To prevent Policy Sweeper from deactivating any ASM policy, create a non-functioning device group and attach the unused ASM policies to that device group.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips