topic Re: FMC backup/restore integrity in Network Security

FMC backup/restore integrity

anazarenko — Fri, 21 Feb 2020 17:48:26 GMT

Hi,

i am trying to:

backup the full config of FMC

untar the backup

gunzip the table structure file

modify the file

gzip it

tar the backup

upload back to FMC.

And the file appears in "Firepower management backup" list.

Does it mean that there's no integrity check for backup files?

Re: FMC backup/restore integrity

Marvin Rhoads — Fri, 03 Jan 2020 02:50:27 GMT

There's not a MD5 or similar integrity check. You would only know when you attempt to use the modified file and the restore fails that it had been tampered with.

Re: FMC backup/restore integrity

anazarenko — Fri, 03 Jan 2020 12:28:09 GMT

unfortunately i managed to deploy the tampered backup file to FMC without single error.

I have changed the varchar size for uuid field in my backup and I can see it now in FMC mysql:

Lack of integrity check in backup files in such a great product looks very surprising for me.