101 · Question #169
When configuring the BIG-IP ASM System in redundant pairs, which of the following are synchronized? (Choose 2)
The correct answer is B. Security policies C. Web applications. When BIG-IP ASM is deployed in redundant pairs, configuration sync propagates security policies and web application definitions between devices, ensuring both units enforce identical protection rules.
Question
When configuring the BIG-IP ASM System in redundant pairs, which of the following are synchronized? (Choose 2)
Options
- ALicense file
- BSecurity policies
- CWeb applications
- DRequest information
- ETraffic learning information
How the community answered
(46 responses)- A7% (3)
- B87% (40)
- D2% (1)
- E4% (2)
Why each option
When BIG-IP ASM is deployed in redundant pairs, configuration sync propagates security policies and web application definitions between devices, ensuring both units enforce identical protection rules.
License files are device-specific and tied to individual hardware or virtual instance registration - they cannot and are not synchronized between peers.
Security policies are synchronized between ASM peers so both devices apply the same WAF rules, signatures, and parameter definitions - this is the core purpose of ASM sync.
Web application objects are also synchronized because they define the protected application scope that security policies are attached to, and both devices must share the same application inventory.
Request information is per-device runtime traffic data and is not replicated, as each device independently processes its own connections.
Traffic learning information is locally accumulated behavioral data specific to each device and is not part of the configuration sync process.
Concept tested: BIG-IP ASM redundant pair configuration synchronization
Source: https://support.f5.com/csp/article/K17305
Topics
Community Discussion
No community discussion yet for this question.