Bug ID 1042917: Using 'Full Export' of security policy should result with no diffs after importing it back to device.

Last Modified: Nov 07, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP ASM(all modules)

Known Affected Versions:
16.1.0, 16.1.1

Fixed In:
17.0.0, 16.1.2

Opened: Aug 26, 2021
Severity: 3-Major

Symptoms

'Declarative policy import' is adding entities into the policy according what it has in the JSON file. When it imports the policy builder settings, some automatic changes are created in the policy, and it may override other entities which were added before.

Impact

The resulted policy will be different from the exported policy.

Conditions

Policy builder settings are added in import after other affected entities were added before.

Workaround

N/A

Fix Information

'Declarative Policy import' first adds the policy builder settings, and all other affected entities are imported only after it, and in this way the resulted policy is the same as the exported one.

Behavior Change