Bug ID 438222: Good Practice is to copy the built-in policy to a new policy with a different name and modify that

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
11.4.0, 11.4.1

Fixed In:
11.5.0

Opened: Nov 18, 2013

Severity: 3-Major

Symptoms

There can be problems if you modify any portion of the key to an action or condition (ordinal value) and then execute 'load sys config'. The load process uses the instance key for merging and if you remove a key, the load process will add the values back. Good practice is to copy the built-in default policy to a new policy with a different name and then modify that policy. Attach the copied policy to the Virtual Server and not the built-in policy. The GUI provides a "Clone" button to help with this.

Impact

The configuration may not correctly load.

Conditions

Editing a provided policy by the system.

Workaround

Don't modify the default policies. Make copies and modify the copies.

Fix Information

The system now will correctly identify the changed configuration components during the modify operation on a built-in policy. The system will save and load correctly now after these modifications.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips