For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Randy_Toombs_35's avatar
Randy_Toombs_35
Icon for Nimbostratus rankNimbostratus
Sep 18, 2018

Is it possible to import just the ASM policies from a UCS backup?

We have need to see some changes on our ASM policies and don't want to affect prod. We have some UCS backups and would like to just restore them to a VM to do some comparisons. Is there a way that ...
ASM Advanced WAF
security
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Sep 18, 2018

Hey Randy

I'm afraid the ASM policy is stored in a mysql database that you can't access via the UCS directly.

I think the best way would be to fire up a BIG-IP VE using the same version as the intended system. Import it using the following checks:

  • no-license - This option mostly is for RMA use. It loads full configuration from a UCS file except license file.
  • no-platform-check - Bypass platform check.

tmsh load sys ucs [UCS file] no-license no-platform-check

That way it will be easier to import the config. Do note that you will need a license for the BIG-IP VE but the free 90-day trial would most likely work.

You can then manually export the ASM policy to XML/Binary and re-import into your live box.

Please view the following: Manual Chapter: Importing and Exporting Security Policies

Hope this helps 🙂