topic Backups are stripped of sensitive information (such as usernames/passwords/preshared keys) in General Topics

Backups are stripped of sensitive information (such as usernames/passwords/preshared keys)

Bharat_Kumar — Tue, 27 Feb 2024 11:13:28 GMT

Are checkpoint backups stripped of sensitive information (such as usernames/passwords/preshared keys) when created ?

Lesley — Tue, 27 Feb 2024 14:43:32 GMT

It uses a hash to encrypt passwords, so nothing is stripped. To see what hash was used:

show password-controls password-hash-type

To see PSK hash:

vpn dump_psk

To see Smartconsole password from mgmt:

psql_client cpm postgres -c "select fwset from dleobjectderef_data where name='<UserName>';" | grep internal_password

To see hash local GAIA users

show configuration user

I also assume you are fully updated and not running versions with known issues (like old CPinfo version).

Bharat_Kumar — Tue, 27 Feb 2024 16:29:32 GMT

@Lesley Thanks for your response and clarification, yes it's fully updated, and a new Maestro build running at R81.20.