FMC backup/restore integrity

[anazarenko]

Hi,

i am trying to:

backup the full config of FMC

untar the backup

gunzip the table structure file

modify the file

gzip it

tar the backup

upload back to FMC.

And the file appears in "Firepower management backup" list.

Does it mean that there's no integrity check for backup files?

[Marvin Rhoads]

There's not a MD5 or similar integrity check. You would only know when you attempt to use the modified file and the restore fails that it had been tampered with.

[anazarenko]

Hi

unfortunately i managed to deploy  the tampered backup file to FMC without single error.

I have changed the varchar size for uuid field in my backup and I can see it now in FMC mysql:

mysql> desc firewall_policies;
+-------------------------+---------------------------------+------+-----+---------+----------------+
| Field | Type | Null | Key | Default | Extra |
+-------------------------+---------------------------------+------+-----+---------+----------------+
....
| uuid | varchar(37) | NO | PRI | | |

Lack of integrity check in backup files in such a great product looks very surprising for me.