Policy restoration from Enforcement Module to Smart Mgmt server

[kganesh]

Hi All,

I am running both Enforcement module and Management server in HA mode. The current latest policy gets applied to the Enforcement module and it is running successfully for some time. But due to system failure, i am pushed to an extent such that both management servers are down and also don't have
latest policy backup.

But since the enforcement module is running the latest policy, i would like to
restore the latest policy running in enforcement module to the new management server.

is this stated task acheivable directly or suggest the best method to backup the latest policy avl in Enforcement module so that the same can be restored in new mgmt server.

Any suggestion or help in this regard is highly appreciated.

Thanks
Ganesh.K

[melipla]

I thought it was a compiled policy that gets pushed to the firewall. I didn't think it was possible to decompile it and put it back into a management server, if it were you'd could possibly be missing objects....I'd love to hear differently though.

[Blueberry]

Cannot be done I am afraid as the policy is compiled on the management station. I have only heard of CP managing to do this once and that was for a large ISP with a P1 platform.

Although too late now, you should always back your MGMT server up by doing a upgrade_export every now and again.

[stuartgreen]

yeah, i've seen a lot of people ask this before but sadly there's no way to do it (unless you're fluent in hex or binary :P)

would be a very helpful feature actually - if when you push a policy it leaves an uncompiled copy of the policy, rulebase etc for these situations so you could in effect do a policy 'pull'

[hanjan]

Is this still impossible? My management server failed when applying HFA01 on R65 splat and of course all of my backup files turned out to be corrupt...

Best regards,
Jan-Ivar

[mcnallym]

Still not possible.

Probably for future ref I would test the backup before applying the HFA.

[manrag]

Hi to all, have yo used objectfiller from martin hoz? I´ve used it for recreating a SCS and work well, in the documentation it says that you can rebuild your SCS(at least get the objects and rules!!) from files in the Gateway. I havent done this but there it says it can be done. Hope this helps.

You can download offiler here:

ChatScope.com » Downloads

regards.

PD in the tutorial it is explained how to restore the rules and objects of the SCS from the policy installed on the gateway