Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Vladimir
Champion
Champion

migrate_server import failure, Failed to import IPS package file, exit code: 5

I have run into migrate import failing at 36% with Failed to import IPS package file, exit code: 5:

Importing the Management Database
Operation started at Sun Jul 25 11:08:53 EDT 2021

[==================> ] 36% Importing IPS Data ... \
Upgrade progress information is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
Operation finished at Sun Jul 25 11:40:24 EDT 2021
25Jul2021-113807: Failed to import: Failed: java.lang.RuntimeException: java.lang.RuntimeException: java.lang.RuntimeException: Failed to import IPS package file, exit code: 5
Detailed upgrade report is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
[Expert@mgt1:0]#

The html report does not have anything more meaningful.

Import is being performed on the offline R80.40 JFH T294 with latest migration tools package ngm_upgrade_wrapper_994000406_1.tgz

 

Any suggestions on how to get around this issue are appreciated.

Thank you,

Vladimir

 

0 Kudos
7 Replies
Peter_Lyndley
Collaborator

I think i've seen this one before.

If i remember correctly, you need to update IPS to latest level before doing the initial export (if possible) and also update the machine you are importing too, so that they are same level when it tries to import.

I also had the added complication of a Global Policy as well, make sure you are not still connected to a global policy before you export.

 

Hope you find this useful

Vladimir
Champion
Champion

@Peter_Lyndley , thank you. This is not an MDS though, it is SMS.

I cannot upgrade the existing SMS to R80.40, hence the export/import to higher version.

Will try updating the IPS signatures on the source before trying it again.

Cheers,

Vladimir

0 Kudos
PhoneBoy
Admin
Admin

If the IPS signatures haven't been updated in a while, it seems to cause issues with migrate export/import (and migrate_server).
Not sure why, but updating signatures to the latest definitely helps.

0 Kudos
Vladimir
Champion
Champion

Thanks! I've already sent this to the client. Will see if this will help tomorrow:)

IPS_Signature_update.png

fwmeister
Contributor

Make sure you have no snort signatures and/or IoCs. That will definitely screw things up. 

0 Kudos
Vladimir
Champion
Champion

@fwmeister , thanks. I thought about this possibility, but in this client's case there is close to 0 probability that they are using custom IoCs. I've confirmed today that this is the case.

0 Kudos
Vladimir
Champion
Champion

Nope. Tried it again today after successful IPS upgrade on a source management server. Same result with rather unhelpful HTML report:

Import_error_report.png

 

While the export for the source file resulted in:

Export_OK.png

0 Kudos