Forum Discussion

DLP_138742's avatar
DLP_138742
Icon for Nimbostratus rankNimbostratus
Dec 16, 2015

Exporting resources from a Firepass 7.0

Hello,   We are currently migrating from a Firepass 7.0 to a BIG-IP APM 11.6. All is going pretty well, the machine itself isn't that difficult to understand (for the things we do with it, which i...
application delivery
BIG-IP Access Policy Manager (APM)
export
TMSH
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Dec 16, 2015

    Does the XML contain the data you need?

     

    The way I usually approach this problem is by writing some script in perl or python to digest the data and spit it back out as a series of TMSH resource create commands. I have a script put together for a project that contained about 1000 Portal Access resource -> Active Directory group mappings, but RDP resources are going to be completely different.

     

    The big problem with this is that the specifics are highly site dependent. As you're aware, APM has no notion of "groups" as Firepass does. This makes the system incredibly flexible, but does complicate the initial configuration.

     

    I'd probably either write or find someone that is capable with some scripting lanugage (js, perl, python, ruby, powershell, .NET, whatever), have sample output (tmsh commands) and sample input (your XML file), and get that person to spend a few hours to the mapping.

     

DLP's avatar
DLP
Icon for Nimbostratus rankNimbostratus
Dec 17, 2015

Lucas, thanks for your answer! I kinda expected this answer as well :) The Firepass, albeit a very good device for it's time, never had proper exports of data or views of what resource belongs to which user etc. etc. So the migration will be a time consuming effort but gladly also a one time thing. At the moment I'm using some Notepad++ reorganizing of the resources and stick them in a simple script with which I can easily apply them to the APM.

 

Thanks again :)