Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Vladimir
Champion
Champion

migrate_server import failure, Failed to import IPS package file, exit code: 5

I have run into migrate import failing at 36% with Failed to import IPS package file, exit code: 5:

Importing the Management Database
Operation started at Sun Jul 25 11:08:53 EDT 2021

[==================> ] 36% Importing IPS Data ... \
Upgrade progress information is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
Operation finished at Sun Jul 25 11:40:24 EDT 2021
25Jul2021-113807: Failed to import: Failed: java.lang.RuntimeException: java.lang.RuntimeException: java.lang.RuntimeException: Failed to import IPS package file, exit code: 5
Detailed upgrade report is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
[Expert@mgt1:0]#

The html report does not have anything more meaningful.

Import is being performed on the offline R80.40 JFH T294 with latest migration tools package ngm_upgrade_wrapper_994000406_1.tgz

 

Any suggestions on how to get around this issue are appreciated.

Thank you,

Vladimir

 

11 Replies
Peter_Lyndley
Advisor
Advisor

I think i've seen this one before.

If i remember correctly, you need to update IPS to latest level before doing the initial export (if possible) and also update the machine you are importing too, so that they are same level when it tries to import.

I also had the added complication of a Global Policy as well, make sure you are not still connected to a global policy before you export.

 

Hope you find this useful

Vladimir
Champion
Champion

@Peter_Lyndley , thank you. This is not an MDS though, it is SMS.

I cannot upgrade the existing SMS to R80.40, hence the export/import to higher version.

Will try updating the IPS signatures on the source before trying it again.

Cheers,

Vladimir

PhoneBoy
Admin
Admin

If the IPS signatures haven't been updated in a while, it seems to cause issues with migrate export/import (and migrate_server).
Not sure why, but updating signatures to the latest definitely helps.

Vladimir
Champion
Champion

Thanks! I've already sent this to the client. Will see if this will help tomorrow:)

IPS_Signature_update.png

fwmeister
Contributor

Make sure you have no snort signatures and/or IoCs. That will definitely screw things up. 

Vladimir
Champion
Champion

@fwmeister , thanks. I thought about this possibility, but in this client's case there is close to 0 probability that they are using custom IoCs. I've confirmed today that this is the case.

Vladimir
Champion
Champion

Nope. Tried it again today after successful IPS upgrade on a source management server. Same result with rather unhelpful HTML report:

Import_error_report.png

 

While the export for the source file resulted in:

Export_OK.png

K_montalvo
Advisor

i would be very helpful if there's a HTML document of in the CLI while doing the import/export process to let me know the estimated time to complete. If this existed kindly let me know please!

PhoneBoy
Admin
Admin

I'm pretty sure the above HTML file is on the gateway/management somewhere.
Offhand, I don't know where it is, but I bet you could find it based on the URL presented when you see that page.

K_montalvo
Advisor

Report HTML.PNG

@PhoneBoythe report is on /opt/CPSuite-R81.10/fw1/log... but im not able to downloaded while in progress. If i try to open a new session via SFTP to the management and download the HTML file the import progress gets interrupted.

PhoneBoy
Admin
Admin

That would probably break things, depending on how the upgrade process modifies that file.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events