topic Re: How to use scripts from IPSO in Gaia as well in Firewall and Security Management

How to use scripts from IPSO in Gaia as well

walrung — Tue, 21 Jan 2020 14:22:13 GMT

Hi all

The scripts used by IPSO can't be used as they have been moved to Gaia. Is there a problem with scripts?

open 10.1.25.243
user admin
passwd
as
prompt
cd /var/log
lcd c:\usffw_accesslog\krsefw05
mget *messages*
mget *wtmp*
disconnect
as
prompt
quit

It aims to import logs using ftp every night.

Re: How to use scripts from IPSO in Gaia as well

PhoneBoy — Tue, 21 Jan 2020 16:17:41 GMT

IPSO and Gaia are different operating systems.
IPSO is based on FreeBSD, Gaia is based on Linux.
Both have different userspace utilities.

However this looks like a script executed on the client side.
What is executing this script and what output do you get when you try to execute it?

If this is done via expect, it is not supported.
Expect did work prior to R80, doesn't work in R80.x, and requires an RFE to fix.

Re: How to use scripts from IPSO in Gaia as well

walrung — Tue, 21 Jan 2020 16:27:28 GMT

In short, I want to download /var/log/messages file to FTP server every night. This script was used for this purpose.

Re: How to use scripts from IPSO in Gaia as well

PhoneBoy — Wed, 22 Jan 2020 03:28:04 GMT

I understand why you want to run the script.
I'm trying to understand what mechanism is supposed to trigger it.
Please show me precisely where you have configured this script and what the output is when it is executed against a Gaia platform.

Re: How to use scripts from IPSO in Gaia as well

Wolfgang — Wed, 22 Jan 2020 07:28:06 GMT

As I can see in your script you run this script on a Windows host and did a FTP connection to your GAiA appliance.

The script does not look like running on the gateway itself ( not under IPSO or GAiA ).

Maybee on your old IPSO gateway you did run a FTP server ?

Under GAiA you can connect via SCP to your gateway and receive the requested files. You have to change your script to use SCP.

Another thing to know, you can send all your messages from the gateway to the SMS (Firewall-Management) via syslog and view them in Smartconsole.