For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dave_Pisarek's avatar
Dave_Pisarek
Icon for Cirrus rankCirrus
Apr 07, 2020

ASM sync group and LTM sync group

All, I have configured a HA pair where I have one device group for sync/failover and then a sync only for ASM. I configured ASM to use the asm sync only group as auto and left the sync/failover grou...
ASM Advanced WAF
LTM
security
Ivan_Chernenkii's avatar
Ivan_Chernenkii
Icon for Employee rankEmployee
Apr 08, 2020

Hello Dave,

As I see, this is expected behavior, but I agree that such behavior is not very good.

Sync/failover group goes into changes pending state, because in case of creation ASM policy we also create "ASM policy" entity in LTM to operate with it together with LTM entities (VS, L7 Policy and etc.)

This shouldn't happen if you create some entity in ASM policy (e.g. new parameter).

Thanks, Ivan