CSA : Do CSA keep the allowed events with exported policies.

Unanswered Question
Jun 15th, 2009

I've created a server Group on a CSA-MC.

There are 2 sites, and all events on the first CSA (1st Site) will be the same on the second Site. Because the applications on each server are the same. Only the IP address change. (redundancy)

First, the group is in learning mode, and there is no policy defined.

So all event are allowed.

Question :

After the learning mode, I want to export the group and import this group in the second site.

Do CSA keep all allowed events that have been discovered in the 1st Site.

Best regards.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Anonymous (not verified) Fri, 06/19/2009 - 10:58

The Export utility exports entire rule modules and policies (not individual rules), including the accompanying application classes and configuration variables. Because of communication channels established in the original configuration, some site-specific imported configuration information (IP addresses) may not work on another server. Exporting an item will also export related data. In particular, exporting policies will export application classes and configuration variables referenced in rules within the policy. Exporting a group will export associated policies but not hosts. The Export/Import functions are not intended to be used as a backup/restore mechanism as they do not preserve system specific information such as group-host memberships

iantra123 Mon, 06/22/2009 - 23:05


if I export group, then the added policies, during learning mode, will be exported with it?

Best regards

johuston Thu, 07/09/2009 - 03:46


If you are exporting an object that contains your new rules (i.e. the exception policy) then these rules will be exported. You can actually run a test by doing the export and then searching the export file for a rule you created (the rule number is of the form id="123")




This Discussion