If I setup a trusted device group across availability zones for the sole purpose of syncing ASM policies, will anything else get synced that I dont know about if I choose auto incremental sync-only. Or will only the ASM policy get synced if I set that up under Application Security/synchronization? I dont want it trying to sync anything else. This is a non HA pair in different zones.
Thanks
I just went ahead and tried it. It looks like, as long as the device-group is designated as an ASM sync group under “security/options/synchronization”, Then it doesnt appear to try and sync anything else. Works pretty good.
Hi @gmauchamer ,
take a look at K12200102: Enabling Application Security Synchronization on a device group. It’s all explained there.
KR
Daniel
Hey @gmauchamer it sounds like the link @Daniel_Wolf shared helped you out, so I’m going to mark it as an Accepted Solution so anyone else with the same issue can easily find help in the future. 