Forum Discussion

DLP_138742's avatar
DLP_138742
Icon for Nimbostratus rankNimbostratus
Dec 16, 2015
Solved

Exporting resources from a Firepass 7.0

Hello,   We are currently migrating from a Firepass 7.0 to a BIG-IP APM 11.6. All is going pretty well, the machine itself isn't that difficult to understand (for the things we do with it, which i...
application delivery
BIG-IP Access Policy Manager (APM)
export
TMSH
  • Lucas_Thompson_'s avatar
    Lucas_Thompson_
    Dec 16, 2015

    Does the XML contain the data you need?

     

    The way I usually approach this problem is by writing some script in perl or python to digest the data and spit it back out as a series of TMSH resource create commands. I have a script put together for a project that contained about 1000 Portal Access resource -> Active Directory group mappings, but RDP resources are going to be completely different.

     

    The big problem with this is that the specifics are highly site dependent. As you're aware, APM has no notion of "groups" as Firepass does. This makes the system incredibly flexible, but does complicate the initial configuration.

     

    I'd probably either write or find someone that is capable with some scripting lanugage (js, perl, python, ruby, powershell, .NET, whatever), have sample output (tmsh commands) and sample input (your XML file), and get that person to spend a few hours to the mapping.

     

Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Dec 16, 2015

Does the XML contain the data you need?

 

The way I usually approach this problem is by writing some script in perl or python to digest the data and spit it back out as a series of TMSH resource create commands. I have a script put together for a project that contained about 1000 Portal Access resource -> Active Directory group mappings, but RDP resources are going to be completely different.

 

The big problem with this is that the specifics are highly site dependent. As you're aware, APM has no notion of "groups" as Firepass does. This makes the system incredibly flexible, but does complicate the initial configuration.

 

I'd probably either write or find someone that is capable with some scripting lanugage (js, perl, python, ruby, powershell, .NET, whatever), have sample output (tmsh commands) and sample input (your XML file), and get that person to spend a few hours to the mapping.