Backing Up and Restoring Advanced Secure Gateway (ASG) Configuration

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

This article will explain how to perform the backup and restore for the ASG whereby both Content Analysis and ProxySG configurations will be retained for partial restoration.

 

Cause

The Content Analysis module in the ASG does not have a backup configuration option as the standalone CAS devices.

Resolution

Perform the backup from the Proxy tab of the ASG Management Console.

Proxy tab > Configuration tab > General > Archive

It will contain the encrypted Content Analysis' "config.xml" configuration file, which should look like below

!- BEGIN content_analysis_system

inline cas-config end-700565352-inline

umyoWG50zLoRQI/4hGb3TbrYLmlCOJSSu1dkGN8FSOq9Re7aMoaBkP6kk4NRHgmtwWPol1vcXLkiC1e2zPqvqeyM+IWuaYDeVcXe8p5BQwRazniGXMsm2tmcuKLbKioE1wBI

u7D80qC7Dskes/nofTt4qQxf0X1QpBBIlEd+kdItUKubiNGG30wONkkd5aEt9UEhcr7uKA48VjlEKRyW0kUJ8o+fTI5WL8EF8dTo9Yjh7Jk704d5k+rk85nkbgzZYntbitCE

YtF0ZR1qBaQQ9iYuii/ORK7XkX2rKogDaJ3OI4QkaMvbUad4cToxcY3IimdYzM12PRmPvT0w9vBHj61eE53GtvjUz/0IQJb0lfLlcC5xbb22BGHcjUxQeXbLSgQ65fjae2Vl

8pLpZBb7yeZ0WeXhjsjKkZaI46eKDEXK6hSwh3EV1HvIylun3muD4zAGaRQ1rEZbbbVBnXLb6tWGGppzvMx9KbAMjJ8KtVdN+1ontE+RHwn3gHQi3qu7kpOaaGR4COzYOW2y

o+bFMP1TF2VbyNNqsMVVwZWFwWSSCDye1DNWTbpO8g/F/DREAWlwv+xLkXEn3pe9cbwr6yM3aWu4TlSnHldVZUG/1HTe3q2duztydvyTVctKJC77adRfeQV/8fYcaAopkBAQ

A=end-700565352-inline

!- END content_analysis_system

 

The fastest way to perform the backup including the unencrypted keys is to enter the following command line:

> enable
# show configuration expanded noprompts with-keyrings unencrypted

The feature of Logging into a file in PuTTY can be used to save the command output.

Note: If you are running version 7.x, the above command will not work, it has been removed. In version 7.x, the Workaround is to set security private-key-display unencrypted option in config mode before running show configuration expanded noprompts command. After set that option you can see configuration output with keyring information.

Blue Coat#configure terminal
Blue Coat#(config)security private-key-display unencrypted
  ok
Blue Coat#(config)exit
Blue Coat#show configuration expanded noprompts

Notes:

To restore this encrypted piece of configuration, the private key "configuration-passwords-key" is required.
The private keys are not included in the web version of the Archive configuration files. The SSh command is required to retrieve the private keys.
The config.xml file does not include the complete CAS configuration. For more information, refer to the related article Content of the config.xml file from a CAS.
More detailed articles related to the backup and restore methods of ProxySG can be found in the Related Articles below.

https://knowledge.broadcom.com/external/article/165985/back-up-and-restore-the-configuration-of.html

https://knowledge.broadcom.com/external/article/165964/back-up-the-configuration-via-the-cli-us.html