Forum Discussion

P_K's avatar
P_K
Icon for Altostratus rankAltostratus
Jun 23, 2026

ASM attack signatures not syncing between active and standby F5

Hello F5ers,

I have a pair of f5s in active/standby setup running ASM (WAF) module. I have ASM synchronization setup with sync-failover device group on both f5s. Everything else works fine but I noticed ASM signatures under system > software management > live update page no longer shows any signatures downloaded or installed my standby f5 anymore. when i try to select an option for "Installation of automatically downloaded updates" such as Real time or scheduled then click Save, I get a "failed to save configuration" error.


This db variable value is same on both f5s

tmsh list /sys db liveupdate.allowautoinstallonsecondary value

sys db liveupdate.allowautoinstallonsecondary {

value "false"

}

Standby f5:

cat /var/log/tomcat/liveupdate.log | egrep 'isMaster|isAsmMaster|isDatasyncMaster'

2026-06-17 16:20:51 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-17 16:20:51 INFO SyncHandler:351 - Set isMaster = true

2026-06-17 16:20:51 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-17 17:18:46 INFO SyncHandler:351 - Set isMaster = true

2026-06-17 17:18:46 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-17 17:18:46 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-23 15:10:23 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:10:23 INFO SyncHandler:351 - Set isMaster = true

2026-06-23 15:26:03 INFO SyncHandler:351 - Set isMaster = true

2026-06-23 15:26:03 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:26:03 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-23 15:41:11 INFO SyncHandler:351 - Set isMaster = false

2026-06-23 15:41:11 INFO SyncHandler:343 - Set isAsmMaster = false

2026-06-23 15:41:11 INFO SyncHandler:347 - Set isDatasyncMaster = false

Active F5:

cat /var/log/tomcat/liveupdate.log | egrep 'isMaster|isAsmMaster|isDatasyncMaster'

2026-06-17 16:39:29 INFO SyncHandler:347 - Set isDatasyncMaster = true

2026-06-23 15:36:50 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:36:50 INFO SyncHandler:351 - Set isMaster = true



Did anyone came across this issue in their environment? 

version: 17.1.3

platform: VM

 

Appreciate any help! thanks 

1 Reply

  • Enes_Afsin_Al's avatar
    Enes_Afsin_Al
    Icon for MVP rankMVP
    Jun 23, 2026

    Hi P_K,

    I’ve encountered a few issues related to the ASU sync problem.

     

    Newly added and updated article:

    ASM Automatic Signature Update (ASU) Fails to Sync to Standby Unit After Upgrade

    https://my.f5.com/manage/s/article/K000161737

     

    Bugs identified in a case opened to the support:

    Live Update configuration sync failure in HA setup

    https://cdn.f5.com/product/bugtracker/ID2219081.html

    "Live Update" API is unresponsive after upgrade and recover only after tomcat restart

    https://cdn.f5.com/product/bugtracker/ID2152445.html