 Re: howto list installed policies (command or file)
The thing is this action must be automated.
So manual action via the dashboard is not an option. Actually to duplicate policies, the trick is to use cp_merge build in command to export a policy package and then import it with a new name.
But the question was to list policy packages that were installed on the FW modules. As I mentioned "fw stat" is not an option due to :
1) the very high number of modules we have.
2) the time it takes (between 5 and 10 seconds per fw module !)
3) the fact that it sometimes fails
The key points are :
- it must be quick
- it must be scriptable
- it must be remotely doable (from the Management center)
So for now, the only option I have found is to parse the audit logs... which is still faster than querying the fw modules with "fw stat" and then parsing the results.
Since the Dashboard gives the opportunity to see which policy is installed on each module, I would have thought it had this information hidden somewhere in a file/database. Unless it queries the modules each time we launch the application.
So any idea ?  |