Bug ID 1042917: Using 'Full Export' of security policy should result with no diffs after importing it back to device.

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Fixed In:
17.0.0, 16.1.2

Opened: Aug 26, 2021

Severity: 3-Major

Symptoms

'Declarative policy import' is adding entities into the policy according what it has in the JSON file. When it imports the policy builder settings, some automatic changes are created in the policy, and it may override other entities which were added before.

Impact

The resulted policy will be different from the exported policy.

Conditions

Policy builder settings are added in import after other affected entities were added before.

Workaround

N/A

Fix Information

'Declarative Policy import' first adds the policy builder settings, and all other affected entities are imported only after it, and in this way the resulted policy is the same as the exported one.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips