CA API Gateway: Request Referred to an Outdated Version of Policy

Products

• STARTER PACK-7
• CA API Gateway

Issue/Introduction

The Layer 7 XML VPN Client fetches policies from the trusted Layer 7 Gateway cluster via the Service Cache. When a published service policy has been changed but the Service Cache has not been updated or the update was not received by the XVC, you will see the following error:

com.l7tech.server.SoapMessageProcessingServlet: Request referred to an outdated version of policy
com.l7tech.server.message: Processing request for service: TestService [/Test]
com.l7tech.server.MessageProcessor: 3017: Policy evaluation for service Test Service [16908289] resulted in status -1 (Undefined)
com.l7tech.server.message: Message was not processed: Undefined (-1)

Environment

Release:
Component: APIXVC

Cause

Routing messages via the XML VPN Client can result in the Layer 7 Gateway failing to resolve services because the XML VPN Client is referring to an old or modified version of a published service policy.

Resolution

The issue is caused by a deficiency in the XVC in versions 5.4 and earlier. In older versions of the XVC, the Service Cache was not properly updated by the Gateway. Because the Service Cache was not updated, the XVC referred to an old version of the policy--as indicated by the error message. To resolve it, you should upgrade the XVC to version 5.4.1 or later--the version of which is not to exceed the version of the Gateway.

Workaround

Layer 7 Technologies understands that change control and management may preclude the ability to upgrade systems, or that remote systems outside of your change management may be using older versions of our software. To work around the limitation, the impacted service or services can be toggled from enabled to disabled and then re-enabled to force the Layer 7 Gateway to update the Service Cache. This action will need to be executed on each saved change of a service policy in order to take effect.