Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Participant

Policy location on a gateway R80

Jump to solution

Hi, 

 

I want to know if it's possible to retrieve the policy on a local gateway. When we do the fw stat, we can see the Policy name but I'm wondering "where" this policy is stored in local (if it's stored at all). 

 

I've search a little bit here, but couldn't find the right answer. 

My overall goal is to try and set let's say an "automated reboot" on a previous Policy from the gateway itself, I'm not sure if it's possible at all but I'm exploring options ;). 

 

Thank you in advance for your help. 

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Champion
Champion

On a R80.x gateway the installed policy can be found within $FWDIR/state/local/FW1/

The rulebase for example is within $FWDIR/state/local/FW1/local.rule

To reach your goal of automatically booting a different policy I recommend doing backups of each policy and then automatically select the backup you want to boot from, restore it and reboot. Done.

View solution in original post

6 Replies
Highlighted

Afaik a local copy should be located in $FWDIR/state/__tmp/FW1
to load local copy: fw fetchlocal -d $FWDIR/state/__tmp/FW1

and now to something completely different
Highlighted
Participant
Thanks 🙂
0 Kudos
Highlighted
Admin
Admin

The policy is stored in compiled form in $FWDIR/state in several files/directories. When you do an fw fetchlocal, it comes from this directory structure.

Note that only the current policy is stored here, not previous policies. The only supported way to change the policy loaded is to push a new one from the Security Management.

Highlighted
Participant
Thanks, you were all pretty fast guys 😉
0 Kudos
Highlighted
Champion
Champion

On a R80.x gateway the installed policy can be found within $FWDIR/state/local/FW1/

The rulebase for example is within $FWDIR/state/local/FW1/local.rule

To reach your goal of automatically booting a different policy I recommend doing backups of each policy and then automatically select the backup you want to boot from, restore it and reboot. Done.

View solution in original post

Highlighted
Participant
Thanks! Will help a lot.
0 Kudos