Forum Discussion

smalex_355988's avatar
smalex_355988
Icon for Nimbostratus rankNimbostratus
Jun 13, 2018

Configuration time keeps on progressing

I have enabled ASM on my F5 and is currently learning traffic. We have sync pair and now even if I sync config with standby device, after few seconds shows 'out of sync'. Configuration time keeps on progressing on the active device.

 

Is this expected behavior?

 

ASM Advanced WAF
security

2 Replies

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 13, 2018

    Hi Smalex,

     

    For me in this case I thing it's a normal behaviour. if you configure ASM to do changes automatically (learning | staging) to the policy, make sense that sync status will change.

     

    You can change the device group you are using for ASM sync. Change the sync type to automatic.

     

    You can try to created a separate sync-only Group (auto) dedicated for ASM and your problem will be solved (I hope :-).

     

    keep me in touch.

     

    regards

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jun 13, 2018

    This message can appear if the time is not synchronized.

    Are BigIP synchronizing time with NTP?

    If not, do one of these configuration :

    • enable NTP (best solution)

    • execute this command on the appliance with wrong time (it will update local time from peer time). change peerIPaddress keyword with the peer IP address 🙂

      date --set="$(ssh root@peerIPaddress date)"