Forum Discussion

Erich_Rockman_1's avatar
Erich_Rockman_1
Icon for Cirrus rankCirrus
Nov 07, 2017

APM Policy Sync SyncOnly Group

Hello experts. Setting up APM policy sync across DCs using a synconly group. The policy syncs successfully but requires you to "Apply Access Policy" on the remote BigIPs. I am running 12.1.2HF1. Odd or expected? Thanks.

 

application delivery
BIG-IP Access Policy Manager (APM)
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Nov 22, 2017

    Your question in https://devcentral.f5.com/questions/apm-policy-sync-56330

     

    " Updated 7 hours ago•Originally posted on 22-Nov-2017 by Erich Rockman 246

     

    Hey all. I posted a similar question a few weeks ago, it went unanswered but relates to this post.

     

    https://devcentral.f5.com/questions/apm-policy-sync-synconly-group-56512

     

    I do not see the same behavior. The APM policy change from a syncOnly group member does not automatically sync the APM policy to the other members. Syncing from Device Management does nothing. Syncing from Access Profiles -> Policy Sync does indeed sync the policy but the "Apply Access Policy" link appears on the other syncOnly members. The policy does not get automatically applied after syncing. v12.1.2HF2.

     

    Auto sync and full sync are checked on the syncOnly group.

     

    Any ideas? Thanks."

     

    The behavior described in the other post was in relation to synchronization using the device management. In your case you are using the APM option to sync per policy.

     

    Anyway, does not seems normal that you need to apply the policy after in each device. Let me test in my lab, and check what the documentation says about that.