Forum Discussion

bsb's avatar
bsb
Icon for Nimbostratus rankNimbostratus
Sep 25, 2019

WAF sync across DC

Have a pair of LTM + WAF device in X location in HA, also have a pair of LTM + WAF device configured in Y location configured in HA.   as of now, i am manually exporting all the ASM(WAF) policies...
application delivery
ASM Advanced WAF
BIG-IP
bsb's avatar
bsb
Icon for Nimbostratus rankNimbostratus

oh great, my worry was will the LTM configuration too gets synchronized as they are in different ip ranges.

its a production env in my case, cant perform testing.

DanS92's avatar
DanS92
Icon for Cirrus rankCirrus
Sep 27, 2019

I'm in the exact same situation... If LTM gets synchronized my production environment will break. My understanding is that the "Incremental Sync" only syncs the portions that you specifically configure it to sync.

Like with ASM, you can go to Security > Options > Application Security > Synchronize to tell it to sync the ASM portion.

It looks like APM has a simlar feature under Access > Profiles/Policies > Policy Sync

My change got pushed back due to network issues in my environment, so I won't be able to do it for a few more weeks...