Rulebase problems when mgmt auto-sync enabled

[ryan_m]

I recently began having an issue where various rules would work sometimes, and not others. Generally re-pushing out the rulebase would correct it. Sometimes only until the next time I pushed a rule, sometimes not. Very sporadic. Called our support folks and they said there was a known issue with managment high availibility setups that causes this. The fix is to delete all excess database revisions, keeping less than 15 at any time, and also to disable the automatic synchronizing of the management servers in the global properties. This did indeed seem to fix the problem. Just to test I re-enabled the auto sync the other day and sure as heck began experiencing flaky rules again. I am seeing this on two different installations, both are R62 for both the managment stations (running SPLAT) and the gateways themselves (Nokia IP560's on IPSO 4.2).

This is apparently a known issue and yet no fixes are out for it, which sounds very odd to me, anybody else have any experience with this, or know any more about it? I *really* don't like the solution of leaving auto-sync off... what's the point of having an HA mgmt server then?