ASM attack signatures not syncing between active and standby F5

Forums Technical Forums
, ,
1

Hello F5ers,

I have a pair of f5s in active/standby setup running ASM (WAF) module. I have ASM synchronization setup with sync-failover device group on both f5s. Everything else works fine but I noticed ASM signatures under system > software management > live update page no longer shows any signatures downloaded or installed my standby f5 anymore. when i try to select an option for “Installation of automatically downloaded updates” such as Real time or scheduled then click Save, I get a “failed to save configuration” error.

This db variable value is same on both f5s

tmsh list /sys db liveupdate.allowautoinstallonsecondary value

sys db liveupdate.allowautoinstallonsecondary {

value “false”

}

Standby f5:

cat /var/log/tomcat/liveupdate.log | egrep ‘isMaster|isAsmMaster|isDatasyncMaster’

2026-06-17 16:20:51 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-17 16:20:51 INFO SyncHandler:351 - Set isMaster = true

2026-06-17 16:20:51 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-17 17:18:46 INFO SyncHandler:351 - Set isMaster = true

2026-06-17 17:18:46 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-17 17:18:46 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-23 15:10:23 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:10:23 INFO SyncHandler:351 - Set isMaster = true

2026-06-23 15:26:03 INFO SyncHandler:351 - Set isMaster = true

2026-06-23 15:26:03 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:26:03 INFO SyncHandler:347 - Set isDatasyncMaster = false

2026-06-23 15:41:11 INFO SyncHandler:351 - Set isMaster = false

2026-06-23 15:41:11 INFO SyncHandler:343 - Set isAsmMaster = false

2026-06-23 15:41:11 INFO SyncHandler:347 - Set isDatasyncMaster = false

Active F5:

cat /var/log/tomcat/liveupdate.log | egrep ‘isMaster|isAsmMaster|isDatasyncMaster’

2026-06-17 16:39:29 INFO SyncHandler:347 - Set isDatasyncMaster = true

2026-06-23 15:36:50 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:36:50 INFO SyncHandler:351 - Set isMaster = true

Did anyone came across this issue in their environment?

version: 17.1.3

platform: VM

Appreciate any help! thanks

2

Hi P_K,

I’ve encountered a few issues related to the ASU sync problem.

Newly added and updated article:

ASM Automatic Signature Update (ASU) Fails to Sync to Standby Unit After Upgrade

myF5

Bugs identified in a case opened to the support:

Live Update configuration sync failure in HA setup

Bug ID 2219081

“Live Update” API is unresponsive after upgrade and recover only after tomcat restart

Bug ID 2152445

3 
tmsh restart sys service tomcat

Often helps