Is it possible to import just the ASM policies from a UCS backup?

Hey Randy

I'm afraid the ASM policy is stored in a mysql database that you can't access via the UCS directly.

I think the best way would be to fire up a BIG-IP VE using the same version as the intended system. Import it using the following checks:

• no-license - This option mostly is for RMA use. It loads full configuration from a UCS file except license file.
• no-platform-check - Bypass platform check.

tmsh load sys ucs [UCS file] no-license no-platform-check

That way it will be easier to import the config. Do note that you will need a license for the BIG-IP VE but the free 90-day trial would most likely work.

You can then manually export the ASM policy to XML/Binary and re-import into your live box.

Please view the following: Manual Chapter: Importing and Exporting Security Policies

Hope this helps 🙂