Symptoms

After upgrading BIG-IP devices, BIG-IQ is unable to deploy to devices with an ASM child policy that have unsupported device versions. For managed BIG-IP devices running v13.1 (or earlier) there is inconsistency between the way threat-campaign inheritance section is populated during upgrade vs. how it is populated during discovery of an unsupported device version.

Impact

Deploying BIG-IP devices fails for the upgraded devices.

Conditions

1. Discover & import a BIG-IP device running version 13.1.0 (or earlier) with at least one ASM child policy. 2. Evaluate a deployment in ASM. 3. Review differences in threat-campaigns inheritance section. 4. Deploy BIG-IP devices.

Workaround

None

Fix Information

Following an upgrade, deployment of unsupported devices are not affected by inheritance settings applied to devices running newer versions, and deployment occurs as expected.

Behavior Change