Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
6397 Views 14 Replies Latest reply: Mar 13, 2014 12:30 PM by consoul RSS 1 2 Previous Next
Bert Newcomer 8 posts since
Nov 5, 2009
Currently Being Moderated

Nov 5, 2009 2:11 AM

Automatic backup Configuration Data

Dear reader,

 

We use McAfee Web Gateway version 6.8.5. With this version there is a possibility to manually backup the Configuration Data (Configuration | File Management | Configuration Data).

We're looking for a solution which automatically backups the Configuration Data and transfers (ftp, scp) this to an external host. Who has a solution for this or any experience regarding this?

 

Kind regards,

Bert Brenkman

  • asabban McAfee SME 1,354 posts since
    Nov 3, 2009
    Currently Being Moderated
    1. Nov 5, 2009 2:48 AM (in response to Bert)
    Re: Automatic backup Configuration Data

    Hi Bert,

     

    this is not directly part of the product, but is actually possible. The idea behind it is to use the Secure Admin Shell to trigger the backup command via SSH, and have MWG upload the Backup archive via FTP to destination host.

     

    I have attached a document which I wrote a while ago. Please note that this is not part of the official documentation, it is a quick guide how to set it up we once wrote, but I expect it to work without any issues.

     

    If you got any trouble with it, please don't hesitate to ask me.

     

    best,

    Andre

  • asabban McAfee SME 1,354 posts since
    Nov 3, 2009
    Currently Being Moderated
    2. Nov 16, 2009 2:25 AM (in response to asabban)
    Re: Automatic backup Configuration Data

    Have you tried the instructions from the Guide? Was this helpful for you?

     

    Best,

    Andre

  • asabban McAfee SME 1,354 posts since
    Nov 3, 2009
    Currently Being Moderated
    4. Nov 18, 2009 3:39 AM (in response to Bert)
    Re: Automatic backup Configuration Data

    Hi Bert,

     

    unfortunately this is not (yet) possible at the moment. What you can do is you can call the Backup command and store the backup into a local folder on the Appliance. After the call for the Backup command succeeded, another line in the backup script  can pick up the local file and forward it via SCP.

     

    This is actually not a "beautiful" solution, but it should work until we have SCP support for backups in the product.


    Best,

    Andre

  • tnt Newcomer 13 posts since
    Jan 17, 2011
    Currently Being Moderated
    5. Jun 27, 2011 3:18 AM (in response to asabban)
    Re: Automatic backup Configuration Data

    Hi Asabban,

     

    do you have a documentation for McAfee Web Gateway 7.0.2.4.0 how can automatic backup my appliance?

  • eelsasser McAfee SME 842 posts since
    Mar 24, 2010
    Currently Being Moderated
    6. Jun 27, 2011 7:44 AM (in response to tnt)
    Re: Automatic backup Configuration Data

    Here is a totally unsupported script that I use to cron a backup of my MWG7.

    It may work for you, it may not.

     

    #!/bin/sh
    # ver. 1.0 - 12/13/2010 - Erik_Elsasser@McAfee.com - e²
    # mwgbackup.sh - Provides a scripted method of backing up the MWG7 appliance configuration
    # This script is invoked either from the command line or via a scheduled cron job
    # cron example for every day at 04:00 am
    #0 4 * * * /opt/mwg/bin/mwgbackup.sh 1> /tmp/mwgbackup.out 2>&1


    # This script has very basic functionality. I'm not getting fancy about error checking,
    # parsing fields or putting any significant intelligence in. Adjust to taste.

    # UNAME: used for backup file naming
    UNAME=`uname -n`

    # TIMESTAMP: used for unique filenames
    TIMESTAMP=`date +%y%m%d%H%M`

    # BUFILENAME: used as a destination filename.
    # default will look something like: wwapp0704171400.backup
    BUFILENAME="${UNAME}-${TIMESTAMP}.backup"

    # BUPATH: default directory where backups are stored. This is where the GUI puts them.
    # must have chown mwgc:mwg permissions
    BUPATH="/opt/mwg/storage/backup_cache/default"


    ##########
    # EDIT THESE VALUES FOR YOUR ENVIRONMENT
    # This example backs up to ftp://Logs:password@192.168.2.10/Configs/mwg7/  (mwg7=my machine name)
    BUPROTO="ftp://" # Possible values of (ftp|http|https)
    BUUSER="Logs" # note the trailing ':' this is for [username:password] separation
    BUPASSWORD="password" # Note the trailing '@'. This is for [username:password@]server separation
    BUSERVER="192.168.2.10" # Enter address of the destination server
    BUPORT="21"  # default for FTP
    BUDIRECTORY="/Configs/${UNAME}" # The destination directory. Using UNAME for a unique destination by machine.
    ##########

    ##########
    # run the backup command to a local file
    /opt/mwg/bin/mwg-coordinator -B file:in=ACTIVE,out=${BUPATH}/${BUFILENAME}

    ##########
    # FTP the file to a server
    /usr/bin/curl "${BUPROTO}${BUUSER}:${BUPASSWORD}@${BUSERVER}:${BUPORT}${BUDIRECTORY}/" -T "${BUPATH}/${BUFILENAME}"

  • asabban McAfee SME 1,354 posts since
    Nov 3, 2009
    Currently Being Moderated
    7. Jun 27, 2011 7:48 AM (in response to tnt)
    Re: Automatic backup Configuration Data

    The upcoming MWG 7 version should - as far as I know - contain an internal scheduler which can create backups for you. That should be the official way then. :-)

     

    Best,

    Andre

  • tnt Newcomer 13 posts since
    Jan 17, 2011
    Currently Being Moderated
    8. Jun 27, 2011 8:30 AM (in response to eelsasser)
    Re: Automatic backup Configuration Data

    @eelsasser

    Thanks a lot.

     

    @asabban

    in which version mcafee plan this feature?

     

    Nachricht geändert durch tnt on 27.06.11 15:30:30 MESZ
  • eelsasser McAfee SME 842 posts since
    Mar 24, 2010
    Currently Being Moderated
    9. Jun 27, 2011 9:01 AM (in response to tnt)
    Re: Automatic backup Configuration Data

    7.1.0.x has a sceduled jobs feature currently.

    However, it only allows uploads using PUT via HTTP or HTTPS.

    There is a feature request to add FTP and SFTP for file uploads, but I don't know when that will come out.

1 2 Previous Next

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points