Bug ID 797953: Workaround for SSLo deployment failure from BigIQ to BIG-IP

Last Modified: Oct 13, 2023

Affected Product(s):
BIG-IP BIG-IQ(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,

Opened: Jun 25, 2019

Severity: 3-Major


After discovering and importing multiple SSLo BIG-IPs into BigIQ, configure the SSLo topology on the BigIQ and deploy; some of the BIG-IPs have successful deployment, while some other might fail deployment due to invalid configuration error. It is a post deployment error where /shared/iapp/interception-rules has update error. /shared/iapp/interception-rules is removed starting from RPM 7.0


Some of the BIG-IPs might fail deployment due to Invalid Configuration error which is a result of the updating /shared/iapp/interception-rules error.


BIG-IP with SSLo RPM lower than 7.0.0


1. Discover and import the BIG-IP with SSLo to BigIQ (general setting deployment will be done as part of the import process) 2. On each BIG-IP, ssh to it and restart restjavad and restnoded and wait for the processes to be restarted. 3. Configure the SSLo configuration on BigIQ and deploy to BIG-IPs. If the BIG-IP already has SSLo configuration prior to import into BigIQ and you encounter this issue, its SSLo configuration needs to be cleared first. Navigate to /Main/SSL Orchestrator/Configuration, click on the Delete Configuration button, confirm the deletion and then do the above 3 steps.

Fix Information


Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips