Source and Destination groups not found in the DFW export configuration file
search cancel

Source and Destination groups not found in the DFW export configuration file

book

Article ID: 397375

calendar_today

Updated On:

Products

VMware NSX VMware vDefend Firewall

Issue/Introduction

Reviewing the .CVS file created by NSX > UI > Security > Distributed Firewall > Actions > Export FW Configuration doesn't have Source and Destination groups populated.   

Environment

NSX 3.x

Cause

This occurs because NSX 3.x FW Configuration export doesn't pull Source and Destination information from the rules.

Resolution

You can workaround this issue by using a CURL command directly in 3.x NSX Manager.

  • First, SSH into NSX Manager as root (Running API/CURL in NSX Manager will require the admin account credentials)
  • Second, run this CURL command = curl -k --user admin --request GET 'https://localhost/policy/api/v1/infra?filter=Type-Domain%7CGroup%7CSecurityPolicy%7CRule%7CPolicyContextProfile%7CService' > /tmp/dfw_new_config.json
  • Third, export dfw_new_config.json off the NSX manager and convert to .CSV with a tool
  • Last, pull the Source and Destination Group information to combine with the original FW export from NSX manager.

Additional Information

Powered by Wolken Software