ips_export_import on R80.10

[Julien_Matray]

Hi, 

is ips_export_import  is working on R80.10 Management server ?

When i try to export an IPS profile it returns that profile does not exist.

for example if i try to export the Default_Protection IPS profile

# ips_export_import export Default_Protection
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'Default_Protection' does not exist)

Thanks.

[G_W_Albrecht]

That should work - maybe you try a pre-defined Profile, can you try a self-named Clone of it ?

[Julien_Matray]

I tried with a custom profile but same issue.

# ips_export_import export fwalext-Profile
Trying to open the CPMI database...
Completed opening CPMI database.
Start exporting profile object...
Failed to export profile (profile 'fwalext-Profile' does not exist)

And this IPS profile exists.

I tried with ips_export_import export "fwalext-Profile" and ips_export_import export 'fwalext-Profile'

And i have the same issue

[G_W_Albrecht]

I just tried it in my R80.30 SMS - here, the command can simply be found nowhere ! I think this is old R77 legacy stuff left-over in R80.10 and removed by now - with R80.x, a lot of configuration has been moved from e.g. Objects.C file to the sql database. Even with GUIdbEdit you can not change the R80.x database...

If you need this feature i would suggest to open a SR# with TAC !

[G_W_Albrecht · Accepted solution]

I just have received some feedback:

Thank you for providing your feedback to SecureKnowledge on sk65627, titled "How to Import / Export IPS Protection Profiles".

In the past R80 version was included in this sk, but it was removed on January 2018 after it was found that in R80 the imported profile is a partial version of the exported.

That simply means: No longer supported...

The confusing detail is that this command was was still present in Threat Prevention Administration Guides R80.00 to R80.30 p.41 until it was removed:

Checking the updated version of Threat Prevention Administration Guide R80.30 I can see in the Revison history that this section was removed:

12 May 2019    ips_import_export section removed.

[Julien_Matray]

Thanks for your feedback.

indeed seems to be a legacy tool for R7X version does not work anymore on R80.

I think i have to use the API for the export/import.

[G_W_Albrecht]

There still is an export from sql DB  containing the Protection profiles, all here:

/var/opt/CPsuite-R80.30/fw1/conf/objects.Recommended_Protection_a0f6d17ae2f1278f.C