For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alexis_Gruet_22's avatar
Alexis_Gruet_22
Icon for Nimbostratus rankNimbostratus
May 29, 2017

BIGIP v13 - AFM is not synchronised between Sync members

Dear F5 Ph.D   I facing a sync issue when creating a rule in AFM. We have two BIGIP and everything is synchronised (LTM, APM, GTM etc. ) and working as expected, except the FW rules created into ...
AFM
BIG-IP
security
Tikka_Nagi_1315's avatar
Tikka_Nagi_1315
Historic F5 Account
May 30, 2017

Hi Maverick,

 

Please review the output of

 

tmsh show cm sync-status field-fmt and any errors in /var/log/ltm Additionally, for 13.0 please rule out https://support.f5.com/csp/article/K94333370

 

You may want to open a support case for this if not resolved by above suggestions.

 

~Tikka

 

Tikka_Nagi_1315's avatar
Tikka_Nagi_1315
Historic F5 Account
May 30, 2017

Hi Maverick, Since Stanislas asked in the comment if this policy is applied to a self-ip, I would like to point out that:

 

"For HA pairs, policies that are applied to non-floating self IPs are usable only for that self IP, and are not synced among HA peers. "

 

If that's not the issue, please open a support ticket for this and provide qkview from both devices

 

~Tikka