topic Re: ips_export_import on R80.10 in Firewall and Security Management

ips_export_import on R80.10

Julien_Matray — Wed, 04 Dec 2019 08:50:59 GMT

Hi,

is ips_export_import is working on R80.10 Management server ?

When i try to export an IPS profile it returns that profile does not exist.

for example if i try to export the Default_Protection IPS profile

# ips_export_import export Default_Protection
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'Default_Protection' does not exist)

Thanks.

Re: ips_export_import on R80.10

G_W_Albrecht — Wed, 04 Dec 2019 10:02:28 GMT

That should work - maybe you try a pre-defined Profile, can you try a self-named Clone of it ?

Re: ips_export_import on R80.10

Julien_Matray — Wed, 04 Dec 2019 10:26:34 GMT

I tried with a custom profile but same issue.

# ips_export_import export fwalext-Profile
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'fwalext-Profile' does not exist)

And this IPS profile exists.

I tried with ips_export_import export "fwalext-Profile" and ips_export_import export 'fwalext-Profile'

And i have the same issue

Re: ips_export_import on R80.10

G_W_Albrecht — Wed, 04 Dec 2019 11:28:22 GMT

I just tried it in my R80.30 SMS - here, the command can simply be found nowhere ! I think this is old R77 legacy stuff left-over in R80.10 and removed by now - with R80.x, a lot of configuration has been moved from e.g. Objects.C file to the sql database. Even with GUIdbEdit you can not change the R80.x database...

If you need this feature i would suggest to open a SR# with TAC !

Re: ips_export_import on R80.10

G_W_Albrecht — Wed, 04 Dec 2019 12:42:04 GMT

I just have received some feedback:

Thank you for providing your feedback to SecureKnowledge on sk65627, titled "How to Import / Export IPS Protection Profiles".

In the past R80 version was included in this sk, but it was removed on January 2018 after it was found that in R80 the imported profile is a partial version of the exported.

That simply means: No longer supported...

The confusing detail is that this command was was still present in Threat Prevention Administration Guides R80.00 to R80.30 p.41 until it was removed:

Checking the updated version of Threat Prevention Administration Guide R80.30 I can see in the Revison history that this section was removed:

12 May 2019 ips_import_export section removed.

Re: ips_export_import on R80.10

Julien_Matray — Wed, 04 Dec 2019 13:12:49 GMT

Thanks for your feedback.

indeed seems to be a legacy tool for R7X version does not work anymore on R80.

I think i have to use the API for the export/import.

Re: ips_export_import on R80.10

G_W_Albrecht — Wed, 04 Dec 2019 14:05:50 GMT

There still is an export from sql DB containing the Protection profiles, all here:

/var/opt/CPsuite-R80.30/fw1/conf/objects.Recommended_Protection_a0f6d17ae2f1278f.C