How to Migrate Imunify360 from one server to another?

Imunify360 may need to be installed on multiple servers with similar configurations, such as during server migration or when setting up Imunify360 from one server to another. Let’s look at how to install it for multiple servers with similar configurations.

1. Imunify360 Installation

Install Imunify360, then start and enable the service as usual.

2. Copy the configuration files

Copy the configuration files listed below from the old server to the new server. 

/etc/sysconfig/imunify360/imunify360.config.d/*

/usr/share/i360-php-opts/module.ini

/usr/share/i360-php-opts/rules_whitelist (if it exists)

/etc/pam_imunify/i360.ini

/var/i360_pam_imunify/users/users.txt (if it exists)

/etc/sysconfig/imunify360/hooks.yaml

To copy files from the server, use the scp or rsync commands as shown below.

rsync -av /etc/sysconfig/imunify360/imunify360.config.d/* root@ip_address:/etc/sysconfig/imunify360/imunify360.config.d/

rsync -av /usr/share/i360-php-opts/module.ini root@ip_address:/usr/share/i360-php-opts/module.ini

rsync -av /usr/share/i360-php-opts/rules_whitelist root@ip_address:/usr/share/i360-php-opts/rules_whitelist

rsync -av /etc/pam_imunify/i360.ini root@ip_address:/etc/pam_imunify/i360.ini

rsync -av /var/i360_pam_imunify/users/users.txt root@ip_address:/var/i360_pam_imunify/users/users.txt

rsync -av /etc/sysconfig/imunify360/hooks.yaml root@ip_address:/etc/sysconfig/imunify360/hooks.yaml

NOTE : Replace ip_address with the target server’s IP address.

To apply the target system’s notifications settings, restart the imunify-notifier using systemctl command

systemctl restart imunify-notifier

3. Export and Import firewall entries

To export its firewall entries such as whitelists and blacklists, run the following commands in the source server.

imunify360-agent blacklist ip list --limit 999999 | tail -n +2 | awk '{print $1}' > blacklist.txt
imunify360-agent blacklist country list --limit 999 | tail -n +2 | awk '{print $2}' > blacklist-c.txt
imunify360-agent whitelist ip list --limit 999999 | tail -n +2 | awk '{print $1}' > whitelist.txt

Then copy the blacklist.txt, blacklist-c.txt, whitelist.txt files to target server using rsync or scp command.

To import firewall entries, run the following commands in the target server.

cat blacklist.txt | xargs imunify360-agent blacklist ip add
cat blacklist-c.txt | xargs imunify360-agent blacklist country add
cat whitelist.txt | xargs imunify360-agent whitelist ip add

4. Re-installation of features

There are few features such as kernelcare, hardened-php, invisible-captcha. Re-install features from the source server.

Required features can be installed using the below command

imunify360-agent features install <feature-name>

Our Technical Team will be available to assist you with “How to Copy Imunify360 Setups,” which can make your job a lot easier. Get in touch with Skynats if you have any queries.