Forum Discussion

BenJ's avatar
BenJ
Icon for Nimbostratus rankNimbostratus
Jan 18, 2016

11.5.1 - Cannot Export ASM Policies in any Format

Hi all,

 

I've successfully exported/imported ASM policies between F5 devices a number of times without any problem. I've always used the ASM GUI. Today, however, I cannot seem to get the policies to export with any detail in them. The device I'm exporting from is the current Active member of a HA pair, and the Standby member gives me the same result. I've tried three different policies, all of which contain months - if not years - worth of collected config.

 

When I attempt to export the policy everything seems to work fine. However, when trying to import on the new device I get the message that the file contains no policy. I have manually reviewed the XML versions and agree - the document is essentially empty except for the header data (policy name, date, device name, etc). I get the same result (ie. message that the file contains no policy) regardless of whether I attempt the export as XML or binary.

 

I'm uploading my source device's config to iHealth right now to see if anything shows up there, but in the meantime I'd be grateful if anyone has any other ideas they could share with me.

 

Many thanks, Ben.

 

F5 BIPIP: 3900 OS: 11.5.1 HF: 7

 

ASM Advanced WAF
BIG-IP
security

3 Replies

Sort By
  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jan 18, 2016

    I have experienced the exact same problem in the past on 11.5.1, after installing a public hotfix upgrade from HF5 to HF6. In my reference notes, it I see it was resolved with a old-fashioned hard reboot (do it on standby node, but first set the status to Forced Offline to ensure it comes up as Standby and no unintended Cluster Failover could occur).

     

    You should still be able to create a new template from your existing policy as a temp workaround, this option might be more suitable if you cannot initiate a hard reboot yet.

     

  • BenJ's avatar
    BenJ
    Icon for Nimbostratus rankNimbostratus
    Jan 18, 2016

    Thanks for the suggestions Hannes.

     

    Creating a template from an existing policy had a similar result in that when I attempted to export the template it was completely empty. I tried with two different policies to be sure one wasn't damaged. I will consult with the customer to try and get permission to reboot the Standby device and report back.

     

    Fingers crossed!

     

  • BenJ's avatar
    BenJ
    Icon for Nimbostratus rankNimbostratus
    Jan 18, 2016

    I have now rebooted the Standby device and successfully exported all the ASM policies. Each policy has also successfully imported on my migration device.

     

    Thanks for the help Hannes.

     

    Cheers, Ben.