Uploading a Policy Configuration for Offline Analysis

Once you have obtained a policy configuration file, you can upload it to SecureTrack, as a revision for a device configured for Offline Analysis, as follows:

1. Do one of the following:
   • Go to Manage Devices. In the device tree, select the relevant device. Click Import configuration:

     

   • In Compare view, in the device tree, select the relevant device. Click Upload Configuration:

     

2. Navigate to the policy configuration file, and click Open.

The revision will appear after a few minutes in Compare view.

Alternatively, you can upload a policy configuration file to SecureTrack using CLI, as follows:

1. Get into the device-collector pod.

   kubectl exec -it deployment/device-collector -c device-collector -- bash

2. Get the ID of the offline device:

   [<ADMIN> ~]# st stat

   st stat

3. Exit the pod:

   [<ADMIN> ~]# exit

   exit

4. Run the following command to get the ID of the cgi-server. If there are multiple IDs, use the first one:

   kubectl get pods | grep cgi-server

   kubectl get pods | grep cgi-server

5. From the SecureTrack host, copy the policy configuration file to the cgi-server pod:

   kubectl cp <POLICY_CONFIGURATION_FILE_NAME> <cgi-server-id>:/usr/local/st/offline_analysis/offline_<ID> -c cgi-server

   kubectl cp <POLICY_CONFIGURATION_FILE_NAME> <cgi-server-id>:/usr/local/st/offline_analysis/offline_<ID> -c cgi-server

   where

   • <cgi-server-id> is the ID of the cgi-server that you obtained in step 3.

   • <ID> is the ID of the offline device you obtained in step 2.

6. Connect to the cgi-server pod:

   kubectl exec -it <cgi-server-id> -- bash

   kubectl exec -it <cgi-server-id> -- bash

7. Run the following command:

   st restart <ID>

   st restart <ID>

where <ID> is the ID# from step 2.

The revision will appear after a few minutes in the Compare view.