View Single Post
  #4 (permalink)  
Old 2007-12-05
Thorpuse Thorpuse is offline
Senior Member
 
Join Date: 2007-07-16
Posts: 602
Rep Power: 2
Thorpuse has an average reputation (10+)
Default Re: Configuration backup modes

Let me try...

Save As *ONLY* saves a copy of the rulebase. It does NOT save a copy of the objects, user database or SmartDefense settings at the time of the Save. This means that if oblects or object properties change, and you use your saved rulebase, you wiull be using the rulebase with the current objects database, NOT the database at the time of the save.

Lets look at the implications of this - lets say you have a rule that looks like this

Src - ObjectA
Dst - ObjectB
Service - ServiceA
Action - Accept

and this is saved in a rulebase. Now, let's say you delete ObjectA. When an object is deleted, it deletes the object from the database. If this object is the sole object in a source, destination or service column, it replaces it with "Any". So deleting objectA would turn your rulebase into this...

Src - Any
Dst - ObjectB
Service - ServiceA
Action - Accept

Not good...

In short, do NOT use Save As as a revision control method. Use Database Revision control. Use Save As if you need to create a copy of a rulebase to use as a template for another device. I've had to deal with too many bad CP implementations where there are hundreds of Policy Packages, and this makes auditing, cleaning up and administration a real PITA.
Reply With Quote