Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Julien_Matray
Participant
Jump to solution

ips_export_import on R80.10

Hi, 

 

is ips_export_import  is working on R80.10 Management server ?

When i try to export an IPS profile it returns that profile does not exist.

 

for example if i try to export the Default_Protection IPS profile

# ips_export_import export Default_Protection
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'Default_Protection' does not exist)

 

Thanks.

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

I just have received some feedback:

Thank you for providing your feedback to SecureKnowledge on sk65627, titled "How to Import / Export IPS Protection Profiles".

In the past R80 version was included in this sk, but it was removed on January 2018 after it was found that in R80 the imported profile is a partial version of the exported.

That simply means: No longer supported...

The confusing detail is that this command was was still present in Threat Prevention Administration Guides R80.00 to R80.30 p.41 until it was removed:

Checking the updated version of Threat Prevention Administration Guide R80.30 I can see in the Revison history that this section was removed:
 
12 May 2019    ips_import_export section removed.
CCSE CCTE CCSM SMB Specialist

View solution in original post

0 Kudos
6 Replies
G_W_Albrecht
Legend
Legend

That should work - maybe you try a pre-defined Profile, can you try a self-named Clone of it ?

CCSE CCTE CCSM SMB Specialist
0 Kudos
Julien_Matray
Participant

I tried with a custom profile but same issue.

# ips_export_import export fwalext-Profile
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'fwalext-Profile' does not exist)

 

And this IPS profile exists.

I tried with ips_export_import export "fwalext-Profile" and ips_export_import export 'fwalext-Profile'

And i have the same issue

0 Kudos
G_W_Albrecht
Legend
Legend

I just tried it in my R80.30 SMS - here, the command can simply be found nowhere ! I think this is old R77 legacy stuff left-over in R80.10 and removed by now - with R80.x, a lot of configuration has been moved from e.g. Objects.C file to the sql database. Even with GUIdbEdit you can not change the R80.x database...

If you need this feature i would suggest to open a SR# with TAC !

CCSE CCTE CCSM SMB Specialist
0 Kudos
G_W_Albrecht
Legend
Legend

I just have received some feedback:

Thank you for providing your feedback to SecureKnowledge on sk65627, titled "How to Import / Export IPS Protection Profiles".

In the past R80 version was included in this sk, but it was removed on January 2018 after it was found that in R80 the imported profile is a partial version of the exported.

That simply means: No longer supported...

The confusing detail is that this command was was still present in Threat Prevention Administration Guides R80.00 to R80.30 p.41 until it was removed:

Checking the updated version of Threat Prevention Administration Guide R80.30 I can see in the Revison history that this section was removed:
 
12 May 2019    ips_import_export section removed.
CCSE CCTE CCSM SMB Specialist
0 Kudos
Julien_Matray
Participant

Thanks for your feedback.

indeed seems to be a legacy tool for R7X version does not work anymore on R80.

I think i have to use the API for the export/import.

 

0 Kudos
G_W_Albrecht
Legend
Legend

There still is an export from sql DB  containing the Protection profiles, all here:

/var/opt/CPsuite-R80.30/fw1/conf/objects.Recommended_Protection_a0f6d17ae2f1278f.C

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events