Table of Contents:
-
Background
-
Instructions
-
Limitations
-
Related Solutions
Background
Gaia's Backup feature allows backing up the configuration of the Gaia OS and of the Security Management Server database, or restoring a previously saved configuration.
The configuration is saved in a .tgz file in the applicable directory:
| Gaia OS Version |
Hardware Platform |
Local Directory |
| R77.30 and higher |
Check Point Appliances |
/var/log/CPbackup/backups/ |
| Open Server |
| R75.40 - R77.20 |
Check Point Appliances |
/var/log/CPbackup/backups/ |
| Open Server |
/var/CPbackup/backups/ |
Notes:
- Gaia OS can keep the backup file locally, or upload it to a remote TFTP / FTP / SCP server.
- Gaia OS can collect the backup file manually, or based on a schedule.
- Starting from R77, Gaia OS backup also collects VSX configuration (see sk100395).
- Using special characters in the password for backup to FTP or other servers can cause the backup not to start.
Look for errors in /var/log/messages file:
"check_special_char: The key msg is allowed to have special character at it's value".
If you see this error, remove the special character from the password.
Instructions
Refer to the Gaia Administration Guide for your version:
Limitations
| Description |
Applies to Version |
| Gaia Backup & Restore does not support the SMT (HyperThreading). Refer to sk93000. |
All |
| Restore is only allowed using the same Gaia hotfixes on the source and target computers. If the hotfixes are not the same, refer to sk105883. |
All |
| PMTR-38587 - Backup file names can only be in English. |
All |
| Restore is only allowed using the same Gaia version on the source and target computers. |
All |
| Restore is only allowed using the same appliance model on the source and target computers. |
All |
| Once restore is done, you must reboot the machine and install policy in order to apply the new configuration. |
All |
This article does not apply to backup and restore in VSX mode (R75.40VS, R76).
To restore a gateway in VSX mode (R77+), refer to sk100395. |
All |
| The backup file name generated by the backup command should not be renamed and must not contain spaces. |
All |
When backing up to an SCP or FTP server on Windows OS, the backup file is put in the user's home folder.
When restoring from an SCP or FTP on Windows OS, the backup file is taken from the user's home folder. |
R7X
R80.x |
|
Log files are not backed up by default for Security Management Servers
(they are however for MDS backups, see below);
to include log files in the backup include the -l flag
|
All
(Security Management Servers only)
|
|
Log files are backed up by default for MDS backups.
To exclude log files from the backup include the -l flag
|
All
(Multi-Domain Servers only) |
Endpoint Security Server Database is not backed-up by Gaia backup.
To backup Endpoint Security Server Database, follow sk101333. |
All |
| save configuration does not save Route Redistribution Settings or Inbound Route Filters |
R7X |
