Symptoms
After replacing a standby unit and performing a config sync, the operation is successfully completed (i.e., the status is In Sync), however, the EPSEC build image is not synced.
Running the command 'tmsh show apm epsec' on a standby unit reports an error:
01070712:3: Internal error, can't load folder or nested folder for: /Common/EPSEC/Status/<hostname> /Common/<hostname>.
Impact
EPSEC version is mismatched upon UCS Restore. Errors occur.
This might occur when the version of EPSEC on the active device is older than the version on the standby (which is updated first). If there is a UCS file created from the active device, when the config sync occurs from the standby unit, this error occurs.
Conditions
-- EPSEC is enabled.
-- A config sync occurs.
Workaround
You can correct this condition by using either of the following actions:
-- On the active system, install the newer EPSEC package and copy to the standby system, for example:
1. Go to GUI: System :: Software Management : Antivirus Check Updates : Package Status.
2. Select epsec 900.
3. Click 'Install Package'.
-- If the standby system already has epsec build 900, install the epsec 900 manually:
1. # cd /shared/apm/images/
2. # epsec install epsec-1.0.0-900.0.iso
