Learn F5 Technologies, Get Answers & Share Community Solutions Join DevCentral

Filter by:
  • Solution
  • Technology
Answers

ASM - changes pending on Standby unit.

HI all.I'm expiriencing an issue where standby unit goes into changes pending state. From ASM logs I took the following logs when this was happened.-------------------------------------------------------vm0 info g_server_rpc_handler_async.pl[8803]: 01310053:6: Policy Builder applied security policy "/Common/test-1-Policy".-----------------------------------------------------------------------------------------vm0 info perl[5865]: 01310053:6: ASMConfig change: Apply Policy /Common/test-1-Policy [update] { audit: policy = /Common/test-1-Policy, component = Policy Builder }.-------------------------My question is if there is any option on asm (V13 HF2) where Policy builder can make changes on standby Units ?

0
Rate this Question

Answers to this Question

placeholder+image
USER ACCEPTED ANSWER & F5 ACCEPTED ANSWER

You can change the device group you are using for ASM sync. Change the sync type to automatic.

0
Comments on this Answer
Comment made 06-Oct-2017 by HG 341

Hi leonardo.Thanks for your reply on this.I created a separate sync-only Group (auto) dedicated for ASM and the problem solved.I don't know if this is the best practice because I would expect only the active unit make suggestions for policy changes.I searched on f5 documentation but I couldn't find a guide with best practices regarding ASM and version 13.

0
Comment made 09-Oct-2017 by Leonardo Souza 3174

Not sure if there is a document stating that as best practices.

Anyway, if you configure ASM to do changes automatically to the policy, make sense that sync is done automatic as well.

0