NGX Smartcentre backup

[mthomas]

Can someone please advise on the best way to backup my configuration on a Smartcentre server just in case I get a hardware failure? My smartcentre server is running on a windows 2003 platform using Checkpoint NGX.

[kva.kva]

Use "backup" command or "upgrade_export". Backup better, i think.

[mthomas]

does this back up the registry files to? my understanding is that when you back up manually you need to save the registry files.

[oliver]

upgrade_export only saves the database including objects, security policy,... but it does not save network settings nor registry.

kind regards
/oliver

[kva.kva]

"backup" create backup all CP configuration not system configuration.
Configuration files (may be registry, may be smth else) of network interfaces are dependend on OS. If you have SPLAT, so you have tools for backup all system configuration. But if you have another OS - you need another tools to backup your network configuration (may be build-in OS, may be 3'rd party).

[mthomas]

Thanks for the info. I am sorry to ask silly questions but I am new to checkpoints. Basically, I want to only backup the Checkpoint NGX files, not the system configs. That way, if get a hardware failure on the Smartcentre, I can build a new server and then just restore the smartcentre with the backup files.

I have noticed from some documents that when you backup the smartcentre server you need to backup the following files manually:

$FWDIR/conf/Objects_5_0.C
$FWDIR/conf/rulebases_5_0.fws
$FWDIR/conf/slprulbases_5_0.fws
$FWDIR/conf/fwauth.NDB

$FWDIR/conf/internalCA.*
$FWDIR/conf/ICA*.*
$CPDIR/conf/sic_cert.p12

HKEY_LOCAL_MACHINE\SOFTWARE\Checkpoint\SIC

Am I correct in assuming that the “upgrade_export” will backup all the Checkpoint NGX configuration files including those mentioned above. So that in the event of a smartcentre server failure I can rebuild a new windows server, then install the NGX software and then use the “upgrade_import” tool to restore the Checkpoint NGX configuration files?

[Lackie]

Originally Posted by mthomas

Am I correct in assuming that the “upgrade_export” will backup all the Checkpoint NGX configuration files including those mentioned above. So that in the event of a smartcentre server failure I can rebuild a new windows server, then install the NGX software and then use the “upgrade_import” tool to restore the Checkpoint NGX configuration files?

Yup, that is correct.