ASM policy sync on non HA pairs using trust-group

[gmauchamer]

If I setup a trusted device group across availability zones for the sole purpose of syncing ASM policies, will anything else get synced that I dont know about if I choose auto incremental sync-only. Or will only the ASM policy get synced if I set that up under Application Security/synchronization? I dont want it trying to sync anything else. This is a non HA pair in different zones.

Thanks

[gmauchamer]

I just went ahead and tried it. It looks like, as long as the device-group is designated as an ASM sync group under "security/options/synchronization", Then it doesnt appear to try and sync anything else. Works pretty good.

[Daniel_Wolf · Accepted solution]

Hi @gmauchamer,

take a look at K12200102: Enabling Application Security Synchronization on a device group. It's all explained there.

KR
Daniel 

[Leslie_Hubertus]

Hey @gmauchamer it sounds like the link @Daniel_Wolf shared helped you out, so I'm going to mark it as an Accepted Solution so anyone else with the same issue can easily find help in the future. 🙂