Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IQ SSL Orchestrator
Known Affected Versions:
8.0.0, 8.0.0.1
Opened: Mar 25, 2020 Severity: 4-Minor
After selecting the button to remove an SSL Orchestrator (SSLO) configuration for any topologies running all 5.X SSLO RPM versions, the topology deployment will fail.
You are unable to deploy any SSLO topology, security policy, or inspection services to managed BIG-IP devices after using the Remove SSLO Configuration button in BIG-IQ unless you employ the workaround.
This issue occurs only when removing configurations from topologies running any 5.X SSLO RPM version.
To effectively deploy a configuration after using the Remove SSLO Configuration button and clearing your device of all SSL Orchestrator configurations, you must reset your Device Settings and deploy them before attempting additional configurations on the device. Follow the steps in this order to get a successful deployment: 1) In BIG-IQ under Configuration >> SSL Orchestrator >> Devices, click on each managed device for which you did a full clean-up. 2) On each managed device page, modify the General Settings to your specifications. If you have nothing to change, change a field and then revert it to re-activate the Deploy button. 3) Click Deploy. 4) Make other configurations within a topology on this managed BIG-IP device and deploy them successfully.
None