Restore backup file to another CP firewall

[vvcat]

Hi all,

we use upgrade_export to backup our firewall monthly, how can we use this bk file to restore another cp firewall?

we are currently using Nokia IPSO 4.2 and the Checkpoint NGX R60 or how can we find the restore step, do we need to input the key againt.

Please help, thanks.

[Thorpuse]

Use upgrade_import.

[subliminator]

Hi:

upgrade_import is at the heart of your restore. If you've got a series of standalone firewalls, someone else will need to chime in to help (I manage NGX appliance clusters). You would only use your original file if it was upgrade_exported from a management server that was responsible for the other firewall. We place my backup file on CD when moving around from gateway to gateway as a matter of convenience; our build lab is off of our production network. We also have sufficient spares to build out a management server, and place the backup file there (restoring the management server) in order to clone as many gateways as we need to. That is accomplished by simply applying the desired security policy to the replacement hardware, and then putting that device into service. FWIW, I have gotten away without re-SICing restored gateways, but do it now as a matter of standard practice. It isn't as painful under NGX as it has been in the past.

cheers.