Backup of NGX

[Krishnutz]

a little new to me so bare with me

I have a enforcement module on secure platform with the management module on win2003 that has SIC between the 2. it also has ISP redundancy.
My question is i am trying to backup the whole system.
Does it need to separate backups, 1 for the rulebase on the management module and another backup for the packages on the enforcement module?
If so how do i do this?


PLEASE HELP ME!!!

[abusharif]

Whats important is management modules files (policy objects etc). If you have that backed up its always easy to get another fw module up. You should also use splats-build-in backup so you have routing and network configuration of the system itself on your fw module.

[Krishnutz]

thanks for the info.
What tool(s) do i need to use/run to perform this on each module.
I know there is a tool which i use on my old firewall which has the management and enforcement module on one machine called cpimport or cpexport but cant find anything on checkpoint website for NGX R60 on win2003?

[abusharif]

Originally Posted by Krishnutz

thanks for the info.
What tool(s) do i need to use/run to perform this on each module.
I know there is a tool which i use on my old firewall which has the management and enforcement module on one machine called cpimport or cpexport but cant find anything on checkpoint website for NGX R60 on win2003?

for regular SPLAT backup you can schedule it via web admin interface.

For backup of checkpoint you should use upgrade_export and for import upgrade_import tools.

[Krishnutz]

thanks for all your help


much appreciated