Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Gold

revision control for objects

Hello,

I know the new revision control in R80 is not the best solution for reverting something.

We did some misconfiguration and changed the AntiSpoofing and topology configuration of a gateway object. (78 VLANs....) and did publish.

With R77.30 we could use database revision control to get back the old configuration but how about R80?

The revision brings back only the policy but nothing from the objects configuration.

Any ideas to get back the old configuration ?

We can restore a backup have a look into and change all manual to the old values.

But maybe there is a better way?

Wolfgang

5 Replies
Highlighted

Re: revision control for objects

Can you see the changes if you go to Logs & Monitor and open the Audit Logs tab? Maybe search for something like "interface". Since changes to most things get tracked, you might be able to see what the previous values were in these logs?

R80 CCSA / CCSE
0 Kudos
Highlighted
Gold

Re: revision control for objects

We see the new values in the audit logs but not the original. The change of the "comment-field" is shown as changed from "old value" to "new value", but for the interface configuration this isn't shown.

If we open the older revision with ReadOnly view we can't see the topology details of an interface. Very bad at the moment.

0 Kudos
Highlighted

Re: revision control for objects

Does the GW object look different if you view it via the Object Browser vs. looking at it through Gateways & Servers in ReadOnly view? 

R80 CCSA / CCSE
0 Kudos
Highlighted
Gold

Re: revision control for objects

No, it's the same. You get only this simple view in ReadOnly mode:view.PNG

0 Kudos
Highlighted
Silver

Re: revision control for objects

A customer of ours did exactly the same when just finished migrating to R80.20. Eventually he fired up the old management (on VM) and checked the topology settings for differences. Not sure if TAC was consulted.

My blog: https://checkpoint.engineer
0 Kudos