Trafficshield Policy?

Firstly I should point out that this forum section is dedicated to iRules support, rather than general product support, so the best avenue for your question would be to direct it to the global support department - however TrafficShield (3.2 and earlier) support is now best-effort as the product has been superceded by ASM v9.2 and later.

 

 

 

However; the TS & ASM policies are stored in a binary database format, and there are currently no tools available to manipulate policies at the command line. The binary databases are included in a UCS file, however they are almost certainly not much use to you for this..

Yeah, sorry, I figured this was the wrong forum. I didn't know where to put it

 

 

 

Thanks for the answer though.. that sucks

 

 

I guess parsing this UCS file into XML would be...impossible?

Damn, thanks hoolio!

 

 

 

IS there a correct forum for these types of questions? Information is pretty scarce about configuration files and f5 products

That would be a question for the DC people. I've heard talk of a more general support forum being added. I would think ASM could be added as well. Else, or in the meantime, vegan.net and other non-F5 mailing lists might be another avenue.

 

 

As for the export process, the perl script above could be used to script the backing up of policies. The policies themselves can't easily be modified once exported, regardless of how you export them.

 

 

There are existing requests for enhancement (RFEs) to allow administrators to export the policy to a flat file, modify the file and then import them back. If you contact F5 support and ask to have your request attached to the existing RFE, it would add credence to the request.

 

 

Aaron

Ok, thanks for the help and advice etc.

 

 

 

last question -- I assume you must be root in order to run those perl scripts?

I believe that any user with CLI access gets UID 0, or root level access, so any user that's able to log into the command line should be able to run the scripts.