Restoring or migrating policy files between Edge Swg (Proxy SG) devices

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

Both VPM-CPL and VPM-XML policy files can be found in the System Information (Sysinfo) file, and both are required to be installed on to Edge SWG appliance in order to take effect. In case you are migrating policy from one Edge SWG to the other, please make sure that both devices are running the same SGOS version.

Note: This article assumes that you know how to obtain the System Information (Sysinfo) and basic troubleshooting of your Edge SWG appliance.

Resolution

-Open the Sysinfo file.

-Find VPM-CPL file; the code is delimited by a start line and an end line. The start line looks like this:

inline policy vpm end-428318311-inline end-428318311-inline-xml
OR (in older versions)
inline policy vpm-cpl "end-428318311-inline"

The number (428318311) is unique to each proxy, so it will always be different. Searching for "inline policy" is advised, as you will also find out whether local, central or forward files have any content in them so that they can be migrated as well if needed.

After that line, the CPL code of the VPM begins (VPM-CPL). The end of this code is delimited as follows:

end-428318311-inline

Copy the entire content in between the start line and end line, but EXCLUDE these two lines. Paste it on another file, and save the file as vpm-cpl.txt

Important:
The CPL file itself begins with the following syntax: ;; CPL generated
 

For the VPL-XML file, the start line and the end line are shown below.
Start line:

end-428318311-inline
OR (in older versions)
inline policy vpm-xml "end-428318311-inline"

After that line, the XML code of the VPM begins (VPM-XML). The end of this code is delimited as follows:

end-428318311-inline-xml
OR (in older versions)
end-428318311-inline

Copy the entire content in between these start line and end lines, but EXCLUDE those lines. Paste it on another file, and save the file as vpm-xml.txt

Important:
The xml file itself begins with the following syntax: <?xml
The last line within the XML file itself is the following: </vpmapp>

You should now have 2 text files, vpm-cpl.txt and vpm-xml.txt.

-The steps on how to install the policy files are the following:

-Go to the Management Console > Configuration > Policy > Policy File > Visual Policy Files tab

-Import the files by choosing Local file for the VPM-CPL, and choosing the vpm-cpl.txt file, then import the vpm-xlm file by choosing Local file for the VPM-XML file.

Important:
This will erase the current policy, it will not add to what is currently configured

-Please note that the two files previously mentioned do not contain the information located within the Local, Forward or Central policy files, so they should be copied separately as well. If there are existing rules in those files, the starting delimiters look as follow, respectively:

inline policy local end-428318311-inline
inline policy forward end-428318311-inline
inline policy central end-428318311-inline

And for all cases, the end delimiter is the following:

end-428318311-inline