cancel
Showing results for 
Search instead for 
Did you mean: 
Bert
Level 7

Automatic backup Configuration Data

Dear reader,

We use McAfee Web Gateway version 6.8.5. With this version there is a possibility to manually backup the Configuration Data (Configuration | File Management | Configuration Data).

We're looking for a solution which automatically backups the Configuration Data and transfers (ftp, scp) this to an external host. Who has a solution for this or any experience regarding this?

Kind regards,

Bert Brenkman

0 Kudos
16 Replies
asabban
Level 17

Re: Automatic backup Configuration Data

Hi Bert,

this is not directly part of the product, but is actually possible. The idea behind it is to use the Secure Admin Shell to trigger the backup command via SSH, and have MWG upload the Backup archive via FTP to destination host.

I have attached a document which I wrote a while ago. Please note that this is not part of the official documentation, it is a quick guide how to set it up we once wrote, but I expect it to work without any issues.

If you got any trouble with it, please don't hesitate to ask me.

best,

Andre

0 Kudos
asabban
Level 17

Re: Automatic backup Configuration Data

Have you tried the instructions from the Guide? Was this helpful for you?

Best,

Andre

0 Kudos
Bert
Level 7

Re: Automatic backup Configuration Data

Hi Andre,

The instructions are very clear and helpfull. The only problem is that I want to move the backup with SCP. Is (besides FTP, HTTP and HTTPS) SCP also supported?

Kind regards,

Bert

0 Kudos
asabban
Level 17

Re: Automatic backup Configuration Data

Hi Bert,

unfortunately this is not (yet) possible at the moment. What you can do is you can call the Backup command and store the backup into a local folder on the Appliance. After the call for the Backup command succeeded, another line in the backup script  can pick up the local file and forward it via SCP.

This is actually not a "beautiful" solution, but it should work until we have SCP support for backups in the product.


Best,

Andre

0 Kudos
tnt
Level 7

Re: Automatic backup Configuration Data

Hi Asabban,

do you have a documentation for McAfee Web Gateway 7.0.2.4.0 how can automatic backup my appliance?

0 Kudos
eelsasser
Level 15

Re: Automatic backup Configuration Data

Here is a totally unsupported script that I use to cron a backup of my MWG7.

It may work for you, it may not.

#!/bin/sh
# ver. 1.0 - 12/13/2010 - Erik_Elsasser@McAfee.com - e²
# mwgbackup.sh - Provides a scripted method of backing up the MWG7 appliance configuration
# This script is invoked either from the command line or via a scheduled cron job
# cron example for every day at 04:00 am
#0 4 * * * /opt/mwg/bin/mwgbackup.sh 1> /tmp/mwgbackup.out 2>&1


# This script has very basic functionality. I'm not getting fancy about error checking,
# parsing fields or putting any significant intelligence in. Adjust to taste.

# UNAME: used for backup file naming
UNAME=`uname -n`

# TIMESTAMP: used for unique filenames
TIMESTAMP=`date +%y%m%d%H%M`

# BUFILENAME: used as a destination filename.
# default will look something like: wwapp0704171400.backup
BUFILENAME="${UNAME}-${TIMESTAMP}.backup"

# BUPATH: default directory where backups are stored. This is where the GUI puts them.
# must have chown mwgc:mwg permissions
BUPATH="/opt/mwg/storage/backup_cache/default"


##########
# EDIT THESE VALUES FOR YOUR ENVIRONMENT
# This example backs up to ftp://LogsSmiley Tongueassword@192.168.2.10/Configs/mwg7/  (mwg7=my machine name)
BUPROTO="ftp://" # Possible values of (ftp|http|https)
BUUSER="Logs" # note the trailing ':' this is for [usernameSmiley Tongueassword] separation
BUPASSWORD="password" # Note the trailing '@'. This is for [usernameSmiley Tongueassword@]server separation
BUSERVER="192.168.2.10" # Enter address of the destination server
BUPORT="21"  # default for FTP
BUDIRECTORY="/Configs/${UNAME}" # The destination directory. Using UNAME for a unique destination by machine.
##########

##########
# run the backup command to a local file
/opt/mwg/bin/mwg-coordinator -B file:in=ACTIVE,out=${BUPATH}/${BUFILENAME}

##########
# FTP the file to a server
/usr/bin/curl "${BUPROTO}${BUUSER}:${BUPASSWORD}@${BUSERVER}:${BUPORT}${BUDIRECTORY}/" -T "${BUPATH}/${BUFILENAME}"

tnt
Level 7

Re: Automatic backup Configuration Data

@eelsasser

Thanks a lot.

@asabban

in which version mcafee plan this feature?

Nachricht geändert durch tnt on 27.06.11 15:30:30 MESZ
0 Kudos
eelsasser
Level 15

Re: Automatic backup Configuration Data

7.1.0.x has a sceduled jobs feature currently.

However, it only allows uploads using PUT via HTTP or HTTPS.

There is a feature request to add FTP and SFTP for file uploads, but I don't know when that will come out.

0 Kudos
hudsy
Level 7

Re: Automatic backup Configuration Data

eelsasser wrote:

7.1.0.x has a sceduled jobs feature currently.

However, it only allows uploads using PUT via HTTP or HTTPS.

There is a feature request to add FTP and SFTP for file uploads, but I don't know when that will come out.

Is there any update on the feature request to add FTP to MWG?

I see you mentioned version 7.1x being that McAfee is now on 7.3x I would have hoped that this feature request would have been taken effect by now.

0 Kudos