CSCsr00663 - Importing DAP xml file into ASA does not populate DAP entries in ASDM

[JohnGuzolek26400]

The work-around given requires the final step of running the asdm to execute some private internal command to re-read the dap.xml file and thus reload the in-memory dynamic access policies that are then applied for users making vpn connections for example.   The real problem as it affects me, is that I offline render my own DAP.xml and dapacl configuration data and I upload the dap.xml file to flash and I apply the associated dap acl configuration remotely with automation tools.  At this point the asa has everything it needs to apply the updated dynamic access policies.  However, the only way to APPLY the new dap policies is to either reload the configuration or run asdm manually.  The asdm must have a private internal command to tell the asa to re-load the DAP to the running configuration.  I cannot use adsm in my automation tools.  Can Cisco provide us a CLI command that I can use in my automation tools to re-load the new dap.xml and apply the new policies after I upload the new dap.xml file?

[quinnyost]

The underlying bug referenced is marked as resolved, but documentation still states that uploading DAP.xml is not supported.   Additionally, there isn't documentation in the bug on how to make the ASA reload an uploaded dap.xml.

[network]

You can do this through CLI using this command after replacing the dap.xml file.  

configure terminal
dynamic-access-policy-config activate
copy run start

I'm not sure if you have to save the config, but "dynamic-access-policy-config activate"   does work and is the command ran when you click Apply after "Editing" a Dynamic Access Policy through ASDM.    Hope that helps yall!