topic Re: Policy location on a gateway R80 in General Topics

Policy location on a gateway R80

Antoine_Rebuzzi — Thu, 14 Mar 2019 07:27:55 GMT

Hi,

I want to know if it's possible to retrieve the policy on a local gateway. When we do the fw stat, we can see the Policy name but I'm wondering "where" this policy is stored in local (if it's stored at all).

I've search a little bit here, but couldn't find the right answer.

My overall goal is to try and set let's say an "automated reboot" on a previous Policy from the gateway itself, I'm not sure if it's possible at all but I'm exploring options ;).

Thank you in advance for your help.

Re: Policy location on a gateway R80

Vincent_Bacher — Thu, 14 Mar 2019 08:19:03 GMT

Afaik a local copy should be located in $FWDIR/state/__tmp/FW1
to load local copy: fw fetchlocal -d $FWDIR/state/__tmp/FW1

Re: Policy location on a gateway R80

PhoneBoy — Thu, 14 Mar 2019 08:23:13 GMT

The policy is stored in compiled form in $FWDIR/state in several files/directories. When you do an fw fetchlocal, it comes from this directory structure.

Note that only the current policy is stored here, not previous policies. The only supported way to change the policy loaded is to push a new one from the Security Management.

Re: Policy location on a gateway R80

Danny — Thu, 14 Mar 2019 08:29:22 GMT

On a R80.x gateway the installed policy can be found within $FWDIR/state/local/FW1/

The rulebase for example is within $FWDIR/state/local/FW1/local.rule

To reach your goal of automatically booting a different policy I recommend doing backups of each policy and then automatically select the backup you want to boot from, restore it and reboot. Done.

Re: Policy location on a gateway R80

Antoine_Rebuzzi — Thu, 14 Mar 2019 10:31:09 GMT

Thanks 🙂

Re: Policy location on a gateway R80

Antoine_Rebuzzi — Thu, 14 Mar 2019 10:31:25 GMT

Thanks, you were all pretty fast guys 😉

Re: Policy location on a gateway R80

Antoine_Rebuzzi — Thu, 14 Mar 2019 10:31:41 GMT

Thanks! Will help a lot.

Re: Policy location on a gateway R80

George_Ellis — Wed, 25 Jun 2025 19:11:43 GMT

Thanks guys for the directory suggestions (and the other replies)

I found the cheat code.

cat $FWDIR/state/local/FW1/local.sic_name |grep 'o='|awk -F ,o= '{print $2}'|awk -F . '{print $NR}'

Background
cat local.sic_name
sic_name=cn=<fwname>,o=<domainname>..<CAthingy>

Re: Policy location on a gateway R80

the_rock — Thu, 26 Jun 2025 01:12:00 GMT

Excellent!