Jump to content

Exporting policies


Recommended Posts

Hi,

We noticed that there is the really valuable feature for exporting and importing policies.

The questions which arise are:

  • Is it possible to import a policy which was exported on a different system.
  • When looking at the exported file we noticed that is seems to be an encrypted format. Would be very helpful if this would be an editable format. This way one could speedup rollout for customers as only a few settings which differ could be edited before importing.

Cheers.

Link to comment
Share on other sites

  • Administrators

1, It should be possible, at least if the same version of the Configuration Engine module is installed on both ESMC machines.
2, Even after decryption policies are stored in the json format which is not intended for editing by users. It would look like:
{"policy":{"format":"1","data":{"emsx":{"Settings":{"LiveGrid":{"ce_flags":"0","DynamicDefenseEnabled":{"ce_flags":"4","ce_type":"0","ce_value":"1"},"

Link to comment
Share on other sites

Hi Marcos,

Thanks for your answer,

JSON is great as it can easily be parsed with JSCRIPT (WSH) on Windows and is much better readable than XML. There are also some good editors around with JSON support (like Notepad++) which make it very easy to edit via object (tree) view.

But reading your answer I suspect there is no supported way for getting the raw JSON 😉

Cheers

Link to comment
Share on other sites

  • Administrators

Correct. Even if you had a decrypted policy file, its structure and particular data values can be interpreted only by developers, e.g. the following would be meaningless for users. And editing a particular value incorrectly could break more than just one thing.

image.png

Link to comment
Share on other sites

Ok it seem there is more than just the properties and its values within the JSON file. So it really makes no sens to make it accessible to the public in this form.

However from what you wrote it should be possible to export the policies on one system and import them on another system. Afterward the things which differ could be edited via GUI. This would save a lot of time and reduce the chance of errors while typing in lot of rules.

Thanks again for your help.

Regards

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...