Package: dsmigrator
Trend Micro Policy MigratorMoves your existing on-prem Deep Security deployment to CloudOne Workload Security.Automatically.TABLE OF CONTENTSQuickstartCapabilitiesKnown limitationsUsageCommand ReferenceUse Environment VariablesRequirementsContributingSupportLicenseQuickstartUse the package managerpipto install dsmigrator.Runpip install dsmigratoron a machine with access to your DSM.Rundsmg -kand fill out the credential prompts.CapabilitiesHere's the current feature map of what the tool can migrate:PoliciesPolicy settingsAnti-Malware Scan ConfigurationsIPS, LI, and IM custom rulesFirewall rulesSchedulesContextsIP listsMAC listsPort lists[BETA] Tasks (still quite buggy)[BETA] Computer GroupsApplication Control (everything)Self-signed certificate support for authenticated requestsKnown limitationsCannot migrate customized IM/LI/IP rules. Another tool will be incoming to help aid a manual process in identifying each rule that has been customized, but they will never migrate automatically due to an API limitationWon't migrate cloud accounts. Must be reconfigured/reauthenticated in Cloud OneDoesn't migrate DSM settings, make sure to check these manually.Application Control support is not on the roadmap currently. Please open an issue if this isUsageCommand ReferenceUsage: dsmg [OPTIONS]

  Moves your on-prem DS deployment to the cloud!

Options:
  -ou, --original-url TEXT        A resolvable FQDN for the old DSM, with port
                                  number (e.g. https://192.168.1.1:4119/)

  -oa, --original-api-key TEXT    API key for the old DSM with Full Access
                                  permissions

  -nu, --new-url TEXT             Destination url  [default:
                                  https://cloudone.trendmicro.com/]

  -coa, --cloud-one-api-key TEXT  API key for Cloud One Workload Security with
                                  Full Access permissions

  -d, --delete-policies / --keep-policies
                                  Wipes existing policies in Cloud One (not
                                  required, but will give best results)

  -t, --tasks                     (BETA) Enable the task migrator (may be
                                  buggy)

  -k, --insecure                  Suppress the InsecureRequestWarning for
                                  self-signed certificates

  -f, --filter TEXT               A list of policy names in form '[name, name,
                                  ...]' which are the only ones which will be
                                  transferred.

  --help                          Show this message and exit.Use Environment VariablesYou can optionally use the following environment variables to pass in your credentials:ORIGINAL_API_KEYORIGINAL_URLCLOUD_ONE_API_KEYRequirementsPython3 (only tested on Python 3.7 or greater so far, so your mileage may vary)One api key for your old Deep Security Manager with "Full Access" permissionsOne api key for your Cloud One account with "Full Access" permissionsA resolvable FQDN to your old Deep Security ManagerNOTE:DS Migrator currently only supports migrations from Deep Security 20 and 12.ContributingRun ./dev-setup.sh, which will download nix and nix flakes.Runnix developwhich will download and build dependencies, and drop you in a shell.SupportFor support, please open an issue on Github.LicenseGNU General Public License