Bug ID 830153: Deployment ASM after upgrading BIG-IP devices running version 13.1 or earlier

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IQ Web App Security (ASM)(all modules)

Fixed In:
7.1.0

Opened: Sep 22, 2019

Severity: 3-Major

Symptoms

After upgrading BIG-IP devices, BIG-IQ is unable to deploy to devices with an ASM child policy that have unsupported device versions. For managed BIG-IP devices running v13.1 (or earlier) there is inconsistency between the way threat-campaign inheritance section is populated during upgrade vs. how it is populated during discovery of an unsupported device version.

Impact

Deploying BIG-IP devices fails for the upgraded devices.

Conditions

1. Discover & import a BIG-IP device running version 13.1.0 (or earlier) with at least one ASM child policy. 2. Evaluate a deployment in ASM. 3. Review differences in threat-campaigns inheritance section. 4. Deploy BIG-IP devices.

Workaround

None

Fix Information

Following an upgrade, deployment of unsupported devices are not affected by inheritance settings applied to devices running newer versions, and deployment occurs as expected.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips