Symptoms

Exporting a security policy from one device with specific learning and blocking settings selected, and then imports it to another device, the security policy does not load the expected learning and blocking settings on the target device, and is a mismatch from what is on the source device.

Impact

The loaded policy on device B does not have all the options checked for HTTP protocol compliance failed for all the sub-violations as expected. When exporting the policy from device B, the name of the exported file does not change to match device B's name, but still remains as device A's name.

Conditions

On device A: Security :: Application Security : Policy Building : Learning and Blocking Settings • Select 'Enable' and 'Learn' under HTTP protocol compliance failed for all the sub-violations. • Save and export the policy in XML format. • Import to device B.

Workaround

For exporting a policy that has Policy Builder enabled, use either of the methods below: -- Use XML export: + On export: - Stop policy builder. - Export to XML policy. - Start policy builder. + On import: - Import the XML policy. - Start the policy builder on the newly imported policy. 2) Use binary export/import.

Fix Information

This release fixes the XML Policy export/import processes so that there are no differences created in the 'HTTP protocol compliance' learning settings

Behavior Change