D-Link DFL-1600 - Security Appliance, User Manual

Page: 76 / 552

Since a full system backup includes a NetDefendOS version, compatability is not an issue with
these types of backup.
With configuration only backups, the following should be noted:
• A configuration backup created on a higher NetDefendOS version should never be uploaded to a
lower NetDefendOS version. For example, a backup created from a 9.15.02 version should
never be uploaded to a 9.10.02 version.
• A configuration backup created on a lower version can be uploaded to a higher version, however
there can be compatability issues in certain cases which will be indicated by messages from
NetDefendOS when the uploaded configuration is activated. Such problems can result in a
NetDefendOS restart.
For this reason, a full system backup is useful when trying to transfer a saved configuration to
new hardware where the new hardware comes preloaded with a higher NetDefendOS version.
First, upload the full system backup to get a system with the right version and then upload the
latest configuration backup. If there is a requirement to move to a higher NetDefendOS version,
an NetDefendOS upgrade can then be performed.
The Management Interfaces Used
Both types of backup, configuration and system, can be performed either by downloading the file
directly from the NetDefend Firewall using SCP (Secure Copy) or alternatively using the WebUI.
Backup cannot be done using CLI commands.
Similarly, restoring a backup is done in the reverse fashion. Either by uploading the backup file
using SCP or alternatively through the WebUI. A restore cannot be done with CLI commands.
Operation Interruption
Backups can be created at any time without disturbing NetDefendOS operation. For restores,
however, it is not recommended to have live traffic flowing since the restored configuration may
significantly alter the security policies of the firewall.
After restoring a backup it is necessary to Activate the new configuration, as is done with a normal
configuration change.
A complete system restore will require that NetDefendOS reinitializes, with the loss of all existing
connections. Initialization may require some seconds to complete depending on the hardware type
and normal operation will not be possible during this time.
Backup and Restore using SCP
There are two files located in the NetDefendOS root directory:
• config.bak - This is the backup of the current configuration.
• full.bak - This is the backup of the complete system.
SCP can be used to download either of these files. When the download is complete the filename will
be altered to include the date. For example, full.bak might become full-20081121.bak to show it is a
snapshot of the state on November 21st, 2008.
To restore a backup file, the administrator should upload the file to the NetDefend Firewall. The
name of the file does not need to be changed in any way and can retain the date since NetDefendOS
will read a header in the file to determine what it is.
2.7.2. Backing Up Configurations Chapter 2. Management and Maintenance
76