Export Configuration in a human-readable format
At the moment export full configuration is easy with the new option but we need some way to export full configuration or part of it where the config. is full readable as it is possible with UTM.
This can be used for Passive Analysis too.
Hans-Josef Theo Tillmann commented
If you want a nice export of like say policies or like IP Host's to be able to easy see what is configured use the export function and export selective configuration like IPHost or Interfaces and download the file. Extract the Entities.xml file and open with exel. This gives you a clean easy to read output of a specific category.
I agree this is much needed.
Blagoja Kondratjuk commented
Desperately need this! Especially with my customers who need that type of documentation in order to comply with certain audits.
Stanley Barnett commented
I need it for troubleshooting...
I cannot believe such a feature is not part of the XG lineup, given what it costs to own. I also see you guys have been asking for this for over 4 years now and it still has not made it into the product. As said elsewhere, I'm a newbie to Sophos and now that I'm getting more involved, the more I'm disappointed.
There are 2 reasons for human readable export of configurations.
1 - Documentation compliance.
2 - configuration comparisons
you use the first for working with external persons or providing documentation on configurations without giving physical access to the devices
I use the second so when major software version updates come along, I can reset the unit to defaults, see what may be listed as recommended configurations and then overlay other requirements on top. That way I don't miss any new features or others in version upgrades.
dont know where my new post went.
Look at https://www.autodoc.com/
AdminRich Baldry (Senior Product Manager, Network Security Group, Sophos Features & Ideas Laboratory) commented
Would this be just as an output for reading/comparing, or would you also need to edit and input the configuration back into the device?
This feature is really needed and missed with our upgrade from SG to XG
Please enable export function
Backups are backups, and their purpose is for recovery of a failed device or configuration changes.
But human readable documentation allows for compliance and also invaluable data for forward planning, working with external services, or being able to replicate a configuration to a new device when upsizing restores don't work.
Mark Payton commented
Ditto what James said. I just had our VOIP system vendor ask me for our network configuration to assist them with some configs on that system. With our previous systems, I could relatively easily generate this, but with the SOPHOS XGs, it looks as if I have to develop it all by hand.
Antonio Cienfuegos commented
Why is this not higher? There're commands that only can be configured through CLI and without a "show running config", the only way to know if X feature is configured is going through every command and you can easily miss one or more.
This is something that isn't a idea, its NECESSARY!
Develop Export Configuration of Firewall in .xls or CSV format for easy to search the documents for Auditors (Auditing Point )
W Jeff Zuercher commented
Need an easy solution to allow a readable configuration for compliance and general implementation. Thanks for the consideration
David Coombe commented
Not only can't I believe this isn't a feature, I can't believe this only has 11 votes.
Would really help for audits.
I can't believe this isn't a feature already.
It would make so much more sense to be able to export a list of Firewall Rules rather than having to manually type them out into a spreadsheet for an audit. It doesn't matter if it can be done through the GUI or through SSH. Any way would be great.
for me, it's not a matter of losing backups (those are automatically sent on a regular basis), but an invaluable way of having your configuration in readable format, for things like compliance or security review.
J Brunner commented
Great idea, but here's a thought, DON'T LOSE BACKUPS! If you are losing backups you have a bigger problem than a lack of documentation.