Symptoms

Attack type filter in signature set is being exported as 'attackTypeReference' instead of attackType.

Impact

Imported policy will have wrong configuration.

Conditions

Policy with attack type based signature set is being exported to JSON.

Workaround

Manually convert: "attackTypeReference" : { "link" : "/attack-types/j0Tz_I-5yKUmvGlePjbjzA?ver=16.1.0", "name" : "Command Execution" }, To: "attackType" : { "name" : "Command Execution" },

Fix Information

None

Behavior Change