Push config - Propagating deletions

[G3rman_]

When doing a push config it appears that new settings are pushed but items that were deleted on the master are not deleted on the slave units. Has anyone come across this and found a solution? I am trying to keep my setup consisten and not have to remove user accounts/group mappings/etc. manually from all my IVEs.

[DanTulovsky_]

I assume you are doing a partial config? (Even if you select all the components). Do a full config push, that will update everything. Keep in mind that that will disconnect active sessions though.

[RKB_]

When you perform a partial push its only a append operation that is performed on the target.

When you perform a full configu push its a overwrite operation that is performed on the target.

[G3rman_]

The problem with the full push is that it also messes up the Network Connect address pools as well as my A/D authentication servers, hence the need to not do a full push.

[DanTulovsky_]

The fix for the address pool is: Define ALL your addresses on ALL your devices in the address pool. Then, on each individual device, go to: System > Network > Network Connect. Add an IP address filter. Each device should include in the filter the IPs that it will give out. This is unique per device/cluster and does not get overwritten with a full config push. If you can give more details on the AD servers as I am not sure what you mean. You use different AD servers on different devices? One way to work around that is to setup DNS views so that the same name resolves to different IPs depending on the location. Dan