Forum Discussion

buzzkiller's avatar
buzzkiller
Icon for Altocumulus rankAltocumulus
Nov 13, 2023
Solved

Security Policy not syncing between devices

 

Greetings,

A few days ago, I had to perform a security update and observed a discrepancy in the synchronization of security policies between the two high-availability (HA) devices. To illustrate, a security policy that appeared transparent on the active device was found to be blocking when the standby device took over. The disparity extended beyond just the enforcement mode; even the rules differed, resulting in the unintended blocking of legitimate traffic. 

I mention that "Application Security Synchronization" is enable for the device group.

Software version is: 15.1.10.2

application
policies
security
  • M_Saeed's avatar
    M_Saeed
    Nov 13, 2023

    buzzkilleryou could follow this up as hereunder and let me know if it is fixed or not.
    1- make sure to create a new device group "sync-only",  you could create it sync automatically or manually

    2- then assign it under Security ›› Options : Application Security : Synchronization : Application Security Synchronization
    3-and repeat applying sync on it.
    4- After making sure syncing with that approach, try again to set WAF sync back to "datasync-global-dg" not your created sync-only group.
     
    -> it would be resolved
     
     



3 Replies

Sort By
  • M_Saeed's avatar
    M_Saeed
    Icon for Cirrus rankCirrus
    Nov 13, 2023

    buzzkilleryou could follow this up as hereunder and let me know if it is fixed or not.
    1- make sure to create a new device group "sync-only",  you could create it sync automatically or manually

    2- then assign it under Security ›› Options : Application Security : Synchronization : Application Security Synchronization
    3-and repeat applying sync on it.
    4- After making sure syncing with that approach, try again to set WAF sync back to "datasync-global-dg" not your created sync-only group.
     
    -> it would be resolved