View Single Post
  #1 (permalink)  
Old 2007-03-27
cames cames is offline
Junior Member
 
Join Date: 2007-03-19
Location: London
Posts: 6
Rep Power: 0
cames has an average reputation (10+)
Default Backing up NGX - Options Compared

Hi All,

I’m just trying to get the various (and recommended) backup procedures clear in my head, so I’d be really grateful if people more knowledgeable than myself could read the below and comment/correct?

1) Database Revision Control is used to create a roll-back copy of all policy rules, objects, users, groups, smart defence, and global properties (and presumably VPNs etc). This will not backup server/FW specific info such as the OS, logs, and interface settings, however. Also, it will not create a file for separate safekeeping, so is not appropriate for disaster recovery.

2) upgrade_export will backup the same as Database Revision Control (everything but server/fw specifics) but does so from the command console or the CD upgrade program, and creates an exportable .tgz file that can be moved to another machine for safekeeping. It also backs up license information and is good for disaster recovery.

3) The “Backup” command (or the SmartCenter's web backup tool) will backup just the SmartCenter server settings such as the OS, interface settings and logs?

Notes:

Important files and folders are…

$FWDIR/Conf (containing Objects.c, Objects_5_0.c and Rulebases_5_0.fws)
$FWDIR/Lib (containing base.def)
$FWDIR/Logs (containing logs)
$FWDIR/Database (contains user database – fwauth.ndb)

…but these are all backed up by using the “upgrade_export” program.

Logs should be regularly backed up by switching the logs (with fw logswitch) and archiving the older files.

Is that all correct, and/or could anyone fill in the gaps for me?

Thanks in advance!
Reply With Quote