topic Re: SMS Automatically Backing Up Gateway Config in Firewall & Security Management

SMS Automatically Backing Up Gateway Config

Jesse — Wed, 23 Jan 2019 16:12:20 GMT

I was in the process of writing a script that would grab the "show configuration" from every gateway, but found in the /var/tmp directory on my SMS the exact thing I was looking for. The directory contains a file titled "<IP Address>-configuration.elg" for every gateway that is managed by the SMS, and appears to get updated every day early in the morning. This is great, but now I'm trying to figure out where these files are coming from. There's nothing in the crontab that would account for this. What process, script, whatever is running that creates them? The SMS is R80.10.

Re: SMS Automatically Backing Up Gateway Config

Maarten_Sjouw — Wed, 23 Jan 2019 18:54:59 GMT

Have you setup your gateways to actually run a daily backup and store it on the management server?

Re: SMS Automatically Backing Up Gateway Config

Norbert_Bohusch — Wed, 23 Jan 2019 18:55:35 GMT

I just checked some environments and I also found it and also for SMB appliances (1100/1400).

edit: btw. I have it in my lab environment as well, where I have no backup at all!

Re: SMS Automatically Backing Up Gateway Config

Jesse — Wed, 23 Jan 2019 19:05:15 GMT

So I think that confirms it's some kind of out the box behavior, now just to track down what's doing it...

Re: SMS Automatically Backing Up Gateway Config

Norbert_Bohusch — Wed, 23 Jan 2019 19:19:03 GMT

I tried digging through logs in /var/log, $CPDIR/log and $FWDIR/log on Mgmt and GW by looking at timeframe of backup and didn't found any hint from where it comes....

Re: SMS Automatically Backing Up Gateway Config

Maarten_Sjouw — Thu, 24 Jan 2019 07:23:02 GMT

I checked on our MDS R80.10 and found 4 files there, but they were dated nov 2017, around the time we installed the boxes, so they are not updated.

I do recall that in the MDS in the first months we had the setting "Sync with usercenter - Sync once a day" turned on

Most probably this setting is on in your management and this will collect the config and upload them to the UC.

Re: SMS Automatically Backing Up Gateway Config

Martin_Valenta — Thu, 24 Jan 2019 07:31:18 GMT

That is synchronising only devices names with serial numbers so later on licenses appear in UC with actual devices names and not uploading gateways configs to CP.

Re: SMS Automatically Backing Up Gateway Config

Jesse — Thu, 24 Jan 2019 16:14:59 GMT

I have an MDS environment as well (separate from the SMS environment), and it does NOT have the configuration files that the SMS environment has. I have "Sync with User Center" enabled in both environments. I agree with Martin, the "show configuration" is not a part of this Sync.

Re: SMS Automatically Backing Up Gateway Config

Maarten_Sjouw — Thu, 24 Jan 2019 18:56:29 GMT

Although it is not part of it, it would not hurt to turn it off and see what happens for a couple of days.

Re: SMS Automatically Backing Up Gateway Config

Nicholas_Sherid — Thu, 24 Jan 2019 19:03:30 GMT

Sort of curious have you checked cron? Just on there off chance (crontab -l) if you know what I mean

Re: SMS Automatically Backing Up Gateway Config

Norbert_Bohusch — Thu, 24 Jan 2019 19:57:55 GMT

In the opening post he wrote that there's nothing in cron.

Re: SMS Automatically Backing Up Gateway Config

Maarten_Sjouw — Thu, 24 Jan 2019 22:09:28 GMT

I have a 1400 and a SMS 80.20 and I have the upload settings disabled and do not see the configuration files on the management server.

Re: SMS Automatically Backing Up Gateway Config

Jesse — Thu, 24 Jan 2019 22:17:30 GMT

Maybe the difference is R80.20. I had the Sync disabled up until last week, but I have files in /var/tmp for some old gateways from last November, when Sync was not turned on.