Nebula ATP and FLEX Export security policy rules

JoostGroot

Hi, for our cutomers and our own company I am looking for a way/feature to export the security policy rules in such a way that we can user it for documentation (CSV would help). We need to document (hard copy) the rules for regulations around the ISO27001 requirements.

Since Nebula doesn't have a backup method, or an export option, we have to copy the rules by hand. In this day and age this can't be the only option for a cloud based platform line Nebula.

Zyxel_Jeff

Currently, Nebula does not support this feature. We suggest using the CLI command 'debug sdwan show firewall running-config' to retrieve the security policy content as a workaround solution.

Zyxel_Jeff

Hi @JoostGroot

Thank you for reaching out to us. Currently, Nebula does not support exporting files for security policy settings because it is a cloud-based platform. Customers are expected to edit the security policies directly on the Nebula page. However, if the user wishes to export the log messages to a .CSV file, we support this feature. Since log messages can be large, the .CSV file should be readable for the user. Thanks.

JoostGroot

To bad, because we need to have a "hardcopy" of the rules as a check and controle. Because there is no versioning in Nebula. For businesses that take their security serious, this is mendatory.

Exporting logs is fine, but that is not a snapshot of the rules. We will look for a way to do this out side of Nebula.

Hope this feature can be added in the future.

Zyxel_Jeff

Hi @JoostGroot

Thank you for your suggestion. Could you please enable Nebula support and provide us with your organization and site names by private message? We would like to examine your current security policy settings. Thank you.

Zyxel_Jeff

Currently, Nebula does not support this feature. We suggest using the CLI command 'debug sdwan show firewall running-config' to retrieve the security policy content as a workaround solution.