Traffic Group Properties

a shot in the dark (going off of hamish's post) It sounds as if your configs are synced but maybe not your device-trust-group. Depending on your code-level, run the tmsh command "run cm watch-devicegroup-device" or from bash "watch_devicegroup_device". This will show you the sync-status of the various sync/trust groups configured on the F5. The CID.id should be the same for the type of group if the group is in sync. If the device_trust_group shows different CID id's for the devices in the group, try making a benign change to the trust group in the configuration utility - navigate to device management | device groups | and enter a description. This should automatically sync once you click "update"