topic Re: How to export Mobile Access rules in SASE and Remote Access

How to export Mobile Access rules

Dave_Pisarek — Wed, 29 Nov 2017 21:28:56 GMT

I am working on a R75 and looking to see if there is a way to export the rules for Mobile Access. I used Web Visualization Tool to view and export as xml but the rules we configured for mobile access are not part of that export. I am new to CP and needed to take over this device and would like to be able to view these rules in xml or html format. Anyway to do this?

Re: How to export Mobile Access rules

PhoneBoy — Thu, 30 Nov 2017 00:21:03 GMT

Mobile Access Rules are in a separate database that's not covered by the Web Visualization Tool.

As far as I know there is no way to export these, particularly from R75.

Re: How to export Mobile Access rules

Dave_Pisarek — Thu, 30 Nov 2017 14:01:09 GMT

I did notice these lines in the cvpnd.c file.

:useLocalSwsPolicyFlag (0)
:swsLocalPolicyFilePath ("$CVPNDIR/htdocs/SNX/CSHELL/CPSWS_LOCAL.xml"

I see that this is set to 0 so apprently not enabled as this file does not exist. If this was enabled what would be available in this file?

Re: How to export Mobile Access rules

PhoneBoy — Thu, 30 Nov 2017 15:47:36 GMT

This is related to SecureWorkspace and not the Mobile Access ruleset.

Re: How to export Mobile Access rules

Dave_Pisarek — Thu, 30 Nov 2017 15:54:44 GMT

One more question, I can see the policy via the Smart Dashboard but I cannot figure out how to see the users or application details. Is there anyway through the dashboard to see the actual details of the objects?

Screen shot:

Re: How to export Mobile Access rules

PhoneBoy — Thu, 30 Nov 2017 17:55:15 GMT

There should be a section called Applications, to the left of the rulebase.

Likewise, the User Groups are below that.

It's possible these are in slightly different locations in earlier releases.

Re: How to export Mobile Access rules

Dave_Pisarek — Fri, 01 Dec 2017 15:45:42 GMT

Hmm, when I take a look at the same screen as your example I have nothing listed...

Is there anywhere else to see these user groups?

Re: How to export Mobile Access rules

PhoneBoy — Fri, 01 Dec 2017 17:25:55 GMT

They may be listed in LDAP Groups or Access Roles, depending on how it was set up.

Re: How to export Mobile Access rules

Kathleen_Murphy — Tue, 28 Jul 2020 17:15:09 GMT

Is there any way to export mobile access policy from R80.10?

Re: How to export Mobile Access rules

PhoneBoy — Tue, 28 Jul 2020 18:14:59 GMT

Legacy MAB Rules? No. If you use a unified policy, MAB Rules can be exported the same as regular Access Policy rules.

Re: How to export Mobile Access rules

carlos_luz — Tue, 17 Oct 2023 13:32:15 GMT

Hello @PhoneBoy ,

Today is there one way to export this rules ? Over API or directly on management?

Re: How to export Mobile Access rules

PhoneBoy — Tue, 17 Oct 2023 14:00:42 GMT

Legacy MAB configuration does not have any API support or ability to export rules that I'm aware of.
If you are using the Unified Policy mode, then those rules can be exported through the Management API like any other.

Re: How to export Mobile Access rules

carlos_luz — Tue, 17 Oct 2023 14:27:39 GMT

My customer need transfer rules of MAB to unified. There is one way to do this ? Or only get one-by-one rule and reply on the unified.

Re: How to export Mobile Access rules

PhoneBoy — Tue, 17 Oct 2023 15:34:00 GMT

There are no automated tools to convert from the legacy MAB policy to a Unified Policy.
It needs to be done by hand.

Re: How to export Mobile Access rules

Atlantic_Suppor — Wed, 25 Sep 2024 16:19:44 GMT

you can run: (echo localhost; echo u; echo admin; echo "<admin_password>"; echo "-t connectra_policy -pf"; echo "-q") | queryDB_util

This will dump it out in this format which you can then go through and extract relevant info:

Q u e r y i n g D B
=====================

Object Name: connectra_authorization_policy
Table Name: connectra_policy
Fields Details
--------------
connectra_authorization_rules: (
0: (
applications: Name: World_Clock (Table: network_applications)
comment: Rule created automatically by Mobile Access wizard.
install_on: Name: Any (Table: globals)
user_groups: Name: grp_usertest (Table: users)
)
)

A total of 1 objects match the query.

Re: How to export Mobile Access rules

Atlantic_Suppor — Wed, 25 Sep 2024 16:21:23 GMT

Q u e r y i n g D B
=====================

A total of 1 objects match the query.

Re: How to export Mobile Access rules

PhoneBoy — Wed, 25 Sep 2024 17:32:46 GMT

R82 has API support for this.