Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Vladimir
Champion
Champion

migrate_server import failure, Failed to import IPS package file, exit code: 5

I have run into migrate import failing at 36% with Failed to import IPS package file, exit code: 5:

Importing the Management Database
Operation started at Sun Jul 25 11:08:53 EDT 2021

[==================> ] 36% Importing IPS Data ... \
Upgrade progress information is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
Operation finished at Sun Jul 25 11:40:24 EDT 2021
25Jul2021-113807: Failed to import: Failed: java.lang.RuntimeException: java.lang.RuntimeException: java.lang.RuntimeException: Failed to import IPS package file, exit code: 5
Detailed upgrade report is available at /opt/CPsuite-R80.40/fw1/log/upgrade_report-2021.07.25_11.37.53.html
[Expert@mgt1:0]#

The html report does not have anything more meaningful.

Import is being performed on the offline R80.40 JFH T294 with latest migration tools package ngm_upgrade_wrapper_994000406_1.tgz

 

Any suggestions on how to get around this issue are appreciated.

Thank you,

Vladimir

 

0 Kudos
11 Replies
Peter_Lyndley
Collaborator

I think i've seen this one before.

If i remember correctly, you need to update IPS to latest level before doing the initial export (if possible) and also update the machine you are importing too, so that they are same level when it tries to import.

I also had the added complication of a Global Policy as well, make sure you are not still connected to a global policy before you export.

 

Hope you find this useful

Vladimir
Champion
Champion

@Peter_Lyndley , thank you. This is not an MDS though, it is SMS.

I cannot upgrade the existing SMS to R80.40, hence the export/import to higher version.

Will try updating the IPS signatures on the source before trying it again.

Cheers,

Vladimir

0 Kudos
PhoneBoy
Admin
Admin

If the IPS signatures haven't been updated in a while, it seems to cause issues with migrate export/import (and migrate_server).
Not sure why, but updating signatures to the latest definitely helps.

0 Kudos
Vladimir
Champion
Champion

Thanks! I've already sent this to the client. Will see if this will help tomorrow:)

IPS_Signature_update.png

fwmeister
Contributor

Make sure you have no snort signatures and/or IoCs. That will definitely screw things up. 

0 Kudos
Vladimir
Champion
Champion

@fwmeister , thanks. I thought about this possibility, but in this client's case there is close to 0 probability that they are using custom IoCs. I've confirmed today that this is the case.

0 Kudos
Vladimir
Champion
Champion

Nope. Tried it again today after successful IPS upgrade on a source management server. Same result with rather unhelpful HTML report:

Import_error_report.png

 

While the export for the source file resulted in:

Export_OK.png

0 Kudos
K_montalvo
Advisor

i would be very helpful if there's a HTML document of in the CLI while doing the import/export process to let me know the estimated time to complete. If this existed kindly let me know please!

0 Kudos
PhoneBoy
Admin
Admin

I'm pretty sure the above HTML file is on the gateway/management somewhere.
Offhand, I don't know where it is, but I bet you could find it based on the URL presented when you see that page.

0 Kudos
K_montalvo
Advisor

Report HTML.PNG

@PhoneBoythe report is on /opt/CPSuite-R81.10/fw1/log... but im not able to downloaded while in progress. If i try to open a new session via SFTP to the management and download the HTML file the import progress gets interrupted.

0 Kudos
PhoneBoy
Admin
Admin

That would probably break things, depending on how the upgrade process modifies that file.

0 Kudos