Nebula ATP and FLEX Export security policy rules

JoostGroot
JoostGroot Posts: 11  Freshman Member
First Comment Second Anniversary
in Nebula

Hi, for our cutomers and our own company I am looking for a way/feature to export the security policy rules in such a way that we can user it for documentation (CSV would help). We need to document (hard copy) the rules for regulations around the ISO27001 requirements.

Since Nebula doesn't have a backup method, or an export option, we have to copy the rules by hand. In this day and age this can't be the only option for a cloud based platform line Nebula.

Accepted Solution

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,247  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Currently, Nebula does not support this feature. We suggest using the CLI command 'debug sdwan show firewall running-config' to retrieve the security policy content as a workaround solution.


    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

All Replies

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,247  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @JoostGroot

    Thank you for reaching out to us. Currently, Nebula does not support exporting files for security policy settings because it is a cloud-based platform. Customers are expected to edit the security policies directly on the Nebula page. However, if the user wishes to export the log messages to a .CSV file, we support this feature. Since log messages can be large, the .CSV file should be readable for the user. Thanks.


    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • JoostGroot
    JoostGroot Posts: 11  Freshman Member
    First Comment Second Anniversary

    To bad, because we need to have a "hardcopy" of the rules as a check and controle. Because there is no versioning in Nebula. For businesses that take their security serious, this is mendatory.

    Exporting logs is fine, but that is not a snapshot of the rules. We will look for a way to do this out side of Nebula.

    Hope this feature can be added in the future.

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,247  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @JoostGroot

    Thank you for your suggestion. Could you please enable Nebula support and provide us with your organization and site names by private message? We would like to examine your current security policy settings. Thank you.


    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,247  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary
    Answer ✓

    Currently, Nebula does not support this feature. We suggest using the CLI command 'debug sdwan show firewall running-config' to retrieve the security policy content as a workaround solution.


    Untitled Image

    See how you've made an impact in Zyxel Community this year! https://bit.ly/Your2024Moments_Community

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）