Policy service error: encoding problem or known bug ?

Question

I have an error 500 in my browser when I try to access a web agent (3.0) protected (Apache 2.2) web site.
I see the following error in the AmAgent log file, it looks like an encoding or dos2unix conversion problem
(I have no Windows platform, only RedHat )
2009-07-31 15:45:42.497MaxDebug 24343:80149a50 PolicyService: Http::Response::readAndParse(): Completed processing the response with status
: success
2009-07-31 15:45:42.497MaxDebug 24343:80149a50 PolicyService: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ResponseSet vers="1.0" svcid="policy" reqid="13">
<Response><![CDATA[<PolicyService version="1.0" revisionNumber="50">^M
<PolicyResponse requestId="3" issueInstant="1249047942497" >^M
<Exception>^M
Evaluation error.
Error reading Resource Index from datastore.
Error reading Resource Index from datastore.
Parser error at line: 3
Parser error at line: 3
Parser error at line: 3^M
</Exception>^M
</PolicyResponse>^M
</PolicyService>^M
Any idea  ?                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

Answer 1

Well I think it's just a bug, because I just copy all my rules (policy-map,class-maps,ACLs), change they names(add 1 at the end)(router change their ID's I suppose), and point this to my zone-pair security and it works fine!
class-map type inspect match-all DMZ310_TO_INTERNET_PASS1
match access-group name DMZ310_TO_INTERNET_PASS1
class-map type inspect match-all DMZ310->INTERNET_INSP_COMB1
match access-group name DMZ310_TO_INTERNET_INSPECT1
match class-map DMZ310->INT_INSPECTION_PROTOCOLS1
class-map type inspect match-any DMZ310->INT_INSPECTION_PROTOCOLS1
description ---=============
match protocol tcp
match protocol icmp
match protocol dns
match protocol user-nashssh
match protocol http
match protocol udp
policy-map type inspect DMZ310->INTERNET_POLICY1
class type inspect DMZ310_TO_INTERNET_PASS1
  pass
class type inspect DMZ310->INTERNET_INSP_COMB1
  inspect
class class-default
  drop
zone security INTERNET
zone security DMZ310
zone-pair security DMZ310->INTERNET source DMZ310 destination INTERNET
service-policy type inspect DMZ310->INTERNET_POLICY1
interface GigabitEthernet0/1.310
encapsulation dot1Q 310
ip address 1.1.1.2 255.255.255.128
ip nat outside
ip virtual-reassembly in
zone-member security DMZ310
standby 3 ip 1.1.1.1
standby 3 priority 15
standby 3 preempt
ip policy route-map BGP-DEFAULT-ROUTE
service-policy input POLICE_DMZ310_IN
service-policy output POLICE_DMZ310_OUT
interface GigabitEthernet0/1.301
description -=ISP=-
encapsulation dot1Q 301
ip address 2.2.2.2 255.255.255.252
ip flow ingress
ip nat outside
ip virtual-reassembly in
zone-member security INTERNET
ip access-list extended DMZ310_TO_INTERNET_INSPECT1
permit icmp host 1.1.1.5 any
permit ip host 1.1.1.5 any
deny   ip any any