# ASM attack signatures not syncing between active and standby F5

**URL:** <https://community.f5.com/t/asm-attack-signatures-not-syncing-between-active-and-standby-f5/77224>\
**Category:** Technical Forums\
**Tags:** management, security, asm-waf\
**Created:** [June 23, 2026, 8:10pm UTC](https://community.f5.com/t/asm-attack-signatures-not-syncing-between-active-and-standby-f5/77224 "2026-06-23T20:10:33Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![P\_K](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/p_k/32/17950_2.png) [@P\_K](https://community.f5.com/u/P_K)\
**Post date:** [June 23, 2026, 8:10pm UTC](https://community.f5.com/t/asm-attack-signatures-not-syncing-between-active-and-standby-f5/77224/1 "2026-06-23T20:10:33Z")

</div>

Hello F5ers,

I have a pair of f5s in active/standby setup running ASM (WAF) module. I have ASM synchronization setup with sync-failover device group on both f5s. Everything else works fine but I noticed ASM signatures under system \> software management \> live update page no longer shows any signatures downloaded or installed my standby f5 anymore. when i try to select an option for “Installation of automatically downloaded updates” such as Real time or scheduled then click Save, I get a “failed to save configuration” error.

This db variable value is same on both f5s

> **tmsh list /sys db liveupdate.allowautoinstallonsecondary value**
> 
> sys db liveupdate.allowautoinstallonsecondary {
> 
> value “false”
> 
> }

**Standby f5:**

> **cat /var/log/tomcat/liveupdate.log | egrep ‘isMaster|isAsmMaster|isDatasyncMaster’**
> 
> 2026-06-17 16:20:51 INFO SyncHandler:343 - Set isAsmMaster = true
> 
> 2026-06-17 16:20:51 INFO SyncHandler:351 - Set isMaster = true
> 
> 2026-06-17 16:20:51 INFO SyncHandler:347 - Set isDatasyncMaster = false
> 
> 2026-06-17 17:18:46 INFO SyncHandler:351 - Set isMaster = true
> 
> 2026-06-17 17:18:46 INFO SyncHandler:343 - Set isAsmMaster = true
> 
> 2026-06-17 17:18:46 INFO SyncHandler:347 - Set isDatasyncMaster = false
> 
> 2026-06-23 15:10:23 INFO SyncHandler:343 - Set isAsmMaster = true
> 
> 2026-06-23 15:10:23 INFO SyncHandler:351 - Set isMaster = true
> 
> 2026-06-23 15:26:03 INFO SyncHandler:351 - Set isMaster = true
> 
> 2026-06-23 15:26:03 INFO SyncHandler:343 - Set isAsmMaster = true
> 
> 2026-06-23 15:26:03 INFO SyncHandler:347 - Set isDatasyncMaster = false
> 
> 2026-06-23 15:41:11 INFO SyncHandler:351 - Set isMaster = false
> 
> 2026-06-23 15:41:11 INFO SyncHandler:343 - Set isAsmMaster = false
> 
> 2026-06-23 15:41:11 INFO SyncHandler:347 - Set isDatasyncMaster = false

**Active F5:**

**cat /var/log/tomcat/liveupdate.log | egrep ‘isMaster|isAsmMaster|isDatasyncMaster’**

2026-06-17 16:39:29 INFO SyncHandler:347 - Set isDatasyncMaster = true

2026-06-23 15:36:50 INFO SyncHandler:343 - Set isAsmMaster = true

2026-06-23 15:36:50 INFO SyncHandler:351 - Set isMaster = true

Did anyone came across this issue in their environment?

version: 17.1.3

platform: VM

Appreciate any help! thanks

---

<div class="post-metadata">

**Author:** ![Enes\_Afsin\_Al](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/enes_afsin_al/32/15359_2.png) [@Enes\_Afsin\_Al](https://community.f5.com/u/Enes_Afsin_Al)\
**Post date:** [June 24, 2026, 12:39am UTC](https://community.f5.com/t/asm-attack-signatures-not-syncing-between-active-and-standby-f5/77224/2 "2026-06-24T00:39:32Z")

</div>

Hi P\_K,

I’ve encountered a few issues related to the ASU sync problem.

Newly added and updated article:

**ASM Automatic Signature Update (ASU) Fails to Sync to Standby Unit After Upgrade**

_[myF5](https://my.f5.com/manage/s/article/K000161737)_

Bugs identified in a case opened to the support:

**Live Update configuration sync failure in HA setup**

_[Bug ID 2219081](https://cdn.f5.com/product/bugtracker/ID2219081.html)_

**“Live Update” API is unresponsive after upgrade and recover only after tomcat restart**

_[Bug ID 2152445](https://cdn.f5.com/product/bugtracker/ID2152445.html)_

---

<div class="post-metadata">

**Author:** ![Juergen\_Mang](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/juergen_mang/32/12756_2.png) [@Juergen\_Mang](https://community.f5.com/u/Juergen_Mang)\
**Post date:** [June 24, 2026, 11:41am UTC](https://community.f5.com/t/asm-attack-signatures-not-syncing-between-active-and-standby-f5/77224/3 "2026-06-24T11:41:07Z")

</div>

```shell
tmsh restart sys service tomcat

```

Often helps