Restoring Web Gateway Backup to new Virtual Appliance

[User15471529]

We are trying to migrate our existing ageing physical web gateway appliances to two new virtual appliances. We have built a cluster to match the physical clustered appliances and joined the virtual appliances to the domain, configured a few users and imported a signed SSL certificate for SSL scanning. We are now at the stage where we need to restore or import the policies into the new clustered virtual appliances. We have taken a backup of the physical and virtual appliances and attempted to restore the physical backup file to the virtual cluster but we get an error: Restore failed due to following exception: failed to restore backup of sent configuration: cannot find own UUID '[long sequence of characters]' in backup." Is there something we are doing wrong or is there an easier way of achieving this aim please?

[mkutrieba]

Hello @User15471529,

I apologize for the late reply. Probably you have already solved this but still wanted to answer for documentation purpose.

A UUID is system/appliance specific and so is the "Configuration" part of the MWG. Backup includes 2 things, "Policy" and "Configuration" part. Policy part can be easily imported in every other machine while Configuration is linked to the UUID of the appliance where it was taken. So if you import backup to new machine and check the box to include configuration and accounts as well, then it fails because new machine has different UUID.

So a configuration part (all under "Configuration" tab in MWG UI) can only be imported to other machine via CLI where you must run a command which includes the old UUID.

All is described in our best practice guide here:
https://community.mcafee.com/t5/Enterprise-Documents/Web-Gateway-Restoring-a-backup-after-a-Hardware...

Best practice overview site:
https://community.mcafee.com/t5/Enterprise-Documents/McAfee-Web-Gateway-Best-Practices-and-Common-Sc...

[zLOB1]

Someone kill articles, maybe spy:

The document you are trying to access is longer available at McAfee Support Community*
How to find DOC about Restore to new appliance?
😕

[mkutrieba]

Hello,

here I attached you the PDF of the old community article about backup and restore.

Regards,

Marcel Kutrieba

[AaronT]

@mkutrieba Can you please help us understand why the article you posted (along with a few others I've looked for) say we don't have permissions to view them anymore?  This is becoming common with a lot of common articles we used for documentation and helping to resolve problems like this.

[mkutrieba]

Hello,

I know this is really frustrating, also for me. But all the old community articles were removed by company as customer facing documentation should be published via official KB articles.

At the moment it is also hard to find them via Google due to transition of the company and keywords.

KB article are located and can be found via this page as well:
https://supportm.trellix.com/webcenter/portal/supportportal/pages_knowledgecenter

Regards,
Marcel

[zLOB1]

How to restore a Web Gateway backup to a replacement appliance or virtual installation (trellix.com)

Link to DOC from KB

[tbowman]

Is there a KB or guide that you can provide a link to perform a Virtual to Virtual migration?

[AaronT]

@tbowman try this link: https://kcm.trellix.com/corporate/index?page=content&id=KB92348&actp=null&viewlocale=en_US&showDraft...

[AaronT]

@User15471529 

There was a KB about this, but apparently I don't have access to it anymore after the move to Trellix.  Basically when do you do a restore, the MWG expects to find itself in there.  There's an easy work-around.

First get the UUID from the backup.  You can look for "co_node id" in the backup file, if you want to script it, try the following (replace path with your file):

uuid=$(grep "co_node id" /path/to/backup | head -1 | awk -F\" '{print $2}')

Once you have the uuid variable and the uuid from the backup, you just have to restore the file and tell your MWG to use the UUID:

/opt/mwg/bin/mwg-coordinator -u mwgc:mwg -R "file:in=/path/to/backup;options:forcedetachgui=yes,uuid=$uuid,internal=no"

This command uses the mwg-coordindator as user mwgc:mwg to Restore the file from /path/to/backup with the options to forcedetachgui (kick users out of the gui and restart it) and set the uuid to the $uuid variable you identified earlier.

Hope this helps.