Backup and Recovery for CheckPoint SecurePlatform

[ricardo]

Hi guys,

I´m from Portugal, and now i´m facing some troubles while trying to implement a backup and recovery in my CheckPoint SecurePlatform R55 .

I´m getting these error :


Creating backup package...
\Cannot complete the backup process due to package compression errors.

Backup operation failed.


does anyone have an ideia of what is going on ?

Thanks in Advance
Ricardo

[kva.kva]

May be hotfix will be helpful

Solution ID: #sk25596 in secureknowledge.checkpoint.com

[Lackie]

What are you using for backup? upgrade_export?

What are you trying to backup? The Check Point configurations or all configurations on the appliance?

[Kubann]

Hi there.
What if I am using the backup process that is scheduled via. the web interface ??? and still get the “package compression errors”

[abusharif]

Originally Posted by Kubann

Hi there.
What if I am using the backup process that is scheduled via. the web interface ??? and still get the “package compression errors”

Silly question perhaps, but do you have enough free space on your /var partition ?

[Kubann]

Yes I do.

Trying to backup all configs. on secureplatform , i.e ip addressing, fw policy,etc.



The actual backup completes, but when I try to do a restore using the backup file – the process fails.

When the backup file was small( 7mb) restore works, now the file is about 95mb .



The error message that comes up is “package compression errors”, failed to complete restore

I do not want to backup the log files, fw.log etc.

According to some info. on the net – this is maybe where the problem lies, but the solutions that they give is somewhat vague.

[kva.kva]

Problem only with backup through WebUI? Did you try create backup manually? Did you transfer it on another server or keep it locally?

[abusharif]

what does the actual TAR command say when u try to unpack the file?

tar vxfz yourbackupfile.tgz


or first:

gunzip yourbackupfile.tgz
then
tar vxf yourbackupfile.tar

[fireworker]

Originally Posted by Kubann

Yes I do.
Trying to backup all configs. on secureplatform , i.e ip addressing, fw policy,etc.

The actual backup completes, but when I try to do a restore using the backup file – the process fails.

When the backup file was small( 7mb) restore works, now the file is about 95mb .

The error message that comes up is “package compression errors”, failed to complete restore

I do not want to backup the log files, fw.log etc.

According to some info. on the net – this is maybe where the problem lies, but the solutions that they give is somewhat vague.

How do you transfer the backup file?
Maybe the tftp server cuts the file.

[Sergej]

It can be 16Mb TFTP problem (already discussed on the forum). Look for the tftp software with support of larger than 16Mb files.

[abusharif]

or ditch it to a local server via regular ftp :p

[polevoym]

I had the same problem.

I found that my $FWDIR/log directory containd a lof of log files.

Try to delete some of the log files and then try to backup again.

Michael.

[Kubann]

Howzit, even if I do a local restore, does the same ..



I tried what u told me, i.e unpack the file with TAR .



It unpacks , then comes up with errors > archive contains obsolescent base-64 headers

,cannot open: No such file or directory



Is there another way to perform a backup of the config and rule base and then do a restore ?

[bmullen]

I encountered the Compression Errors issue. Turnes out when SPLAT transfers the file from my Windows TFTP server (TFTP32D) the transfer occurs as NetAscii and not binary. File is corrupted by Windows/Unix ascii translation. I am looking for a smarter TFTP server.

[kva.kva]

Originally Posted by bmullen

I encountered the Compression Errors issue. Turnes out when SPLAT transfers the file from my Windows TFTP server (TFTP32D) the transfer occurs as NetAscii and not binary. File is corrupted by Windows/Unix ascii translation. I am looking for a smarter TFTP server.

Before downloading/uploading file turn on bin mode. TFTP32D supports it also.

[bmullen]

During the sysconfig phase of an upgrade there is no oppurtunity to change to the bin mode during the upload as this is a scripted process. Using a Linux tftp server solves the problem and I sucessfully imported the backup file from my old firewall.

[Kubann]

Hi, I only find a log dir under /var , is this the same as the $FWDIR/log

or is it the same dir where fw.log is ?