Another option would be to use the Crontab on the BIG-IP to SCP the files to itself (self-update) on a given schedule (I would suggest SSH Keys...and I am also quite cautious about giving access to the devices, so I prefer that the devices themselves go fetch).
That would allow you to have a central location for pickup and negate your replication issues.
It could also allow you to advertise a replication schedule that the update any update requests could be published by.
The biggest problem that I see with this is validation. If an improperly formatted update file is implemented you could get some strange behavior.
Food for thought.
Altostratus
