Saving the source configuration files on SG

Option 1 (through WinSCP):

1. In Webadmin, open the printable configuration.



Download a printable configuration from the GUI under Support > Printable Configuration on UTM 9 firewall.

2. Use WinSCP to connect to the FileSystem of your appliance using SSH.
3. Navigate to /var/chroot-httpd/var/webadmin
4. Create a new folder xx on your computer, and store all the necessary files. Create a subdirectory yy
5. Copy the folder "printable_configuration" into directory xx
6. On your appliance, move to the subfolder var (/var/chroot-httpd/var/webadmin/var). There you will find a directory with a cryptic name e.g.[:$]LIHKeSjlOjzQrjuMESn, double click on it.
7. Copy all the folders from that directory (downloads,objectcache,uploads,xml) to your local folder yy.
8. On your computer navigate in the folder ....xx\yy\xml\
9. Open webadmin.xml in a browser to access the offline configuration.

(This process contains plain text passwords and pre-shared keys, please be mindful of it)



10. Use the file "webadmin.xml" as the input for the FortiConverter tool.

If you have any question, please kindly contact Sophos customer support.

Reference: https://community.sophos.com/utm-firewall/f/general-discussion/22706/howto-export-complete-printable-configuration

Option 2 (through SSH):

1. In Webadmin, open the printable configuration.



Download a printable configuration from the GUI under Support > Printable Configuration on UTM 9 firewall.

2. Use ssh command to connect to the SG appliance, if the current login user is not "admin", you may consider to run "su admin" to obtain file system access permission.
3. Navigate to /var/chroot-httpd/var/webadmin
4. On your appliance, move to the sub folder var (/var/chroot-httpd/var/webadmin/var). There you will find a directory with a cryptic name e.g.[:$]LIHKeSjlOjzQrjuMESn, double click on it.
5. Run "cat webadmin.xml", then copy & paste the outputs into a text file.
6. Use the file as an input for the FortiConverter.

If you are using Putty to access the appliance, please enable logging to preserve all the outputs. When you want putty to log all your session output, you have to change the default settings: Open putty and go to Session -> Logging. Select all session output and specify a log file.