topic Re: How do i open the .sfo file of Access control policy export? in Network Security

How do i open the .sfo file of Access control policy export?

hrithiktej — Tue, 12 Mar 2019 14:11:29 GMT

Hi Can anyone help me find out how to open the .sfo file which is downloaded when i do the export for ACL policy for a firewall from the firepower.

Re: How do i open the .sfo file of Access control policy export?

Abheesh Kumar — Tue, 25 Dec 2018 12:18:45 GMT

Hi,

You cannot view the .sfo file with a text editor. You can import that .sfo file to FMC to view the configuration. Edit the imported ACP to view/edit the configurations, then bind to FTD for deploying the configuration.

Thanks,
Abheesh
PS: Please don't forget to rate and select as validated answer if this answered your question

Re: How do i open the .sfo file of Access control policy export?

Marvin Rhoads — Tue, 25 Dec 2018 12:38:49 GMT

If you'd like an alternative means of looking at your policy, you can use the method described by Oliver Kaiser in his blog:

https://dependencyhell.net/2017/07/09/Dumping-Firepower-ACP.html

Re: How do i open the .sfo file of Access control policy export?

hrithiktej — Tue, 25 Dec 2018 14:12:09 GMT

Thanks, this would have worked for me, but when i execute the sfcli.pl nothing happens. for me sfcli.pl is located in /Volume/6.2.3/sf/bin.

but none of the commands written in the blog produce any results for me.

i do not get bad command or any error when i run the command sfcli.pl show firewall or sfcli.pl any other command it executes and then does nothing. I get blank results as in i m back to the same path again.

Re: How do i open the .sfo file of Access control policy export?

hrithiktej — Tue, 25 Dec 2018 14:45:13 GMT

I do see the access control rules when i run the show access-control config by SSH to my FTD device but to dump it into a file and then pick it up i went into the expert mode and then from /ngfw/var/sf/bin tried running sfcli.pl show firewall and other commands but nothing happens, also if i try to run show commands without sflcli.pl they dont work.

following is the content of sfcli.pl on my FTD FW

admin@xxxx-FW01:/ngfw/var/sf/bin$ cat sfcli.pl
#!/ngfw/usr/bin/perl

use SF::CLI;

umask(0002);

SF::CLI::process_command(@ARGV);

Re: How do i open the .sfo file of Access control policy export?

hrithiktej — Tue, 25 Dec 2018 15:11:39 GMT

Hey for me another thing worked instead of using the sfcli.pl i used the ACConfig.pl from /ngfw/var/sf/bin# and dumped the export in /var/tmp/ then using scp transfered this export to one of my linux server and using winscp i downloaded the file and opened in text and now sorting out all the rules in excel. 🙂 i will mention the comment in the blog. Thanks!