Last Modified: May 29, 2024
Affected Product(s):
BIG-IQ Web App Security (ASM)
Fixed In:
7.1.0
Opened: Sep 22, 2019 Severity: 3-Major
After upgrading BIG-IP devices, BIG-IQ is unable to deploy to devices with an ASM child policy that have unsupported device versions. For managed BIG-IP devices running v13.1 (or earlier) there is inconsistency between the way threat-campaign inheritance section is populated during upgrade vs. how it is populated during discovery of an unsupported device version.
Deploying BIG-IP devices fails for the upgraded devices.
1. Discover & import a BIG-IP device running version 13.1.0 (or earlier) with at least one ASM child policy. 2. Evaluate a deployment in ASM. 3. Review differences in threat-campaigns inheritance section. 4. Deploy BIG-IP devices.
None
Following an upgrade, deployment of unsupported devices are not affected by inheritance settings applied to devices running newer versions, and deployment occurs as expected.