2
Management
39
Backup and restore
The
administrator
has
the
ability
to
take
a
snapshot
of
an
SEG
system
at
a
given
point
in
time
and
restore
it
if
necessary.
The
snapshot
taken
is
known
as
a
configuration
backup
.
This
is
a
backup
of
the
entire
current
SEG
configuration
but
does
not
include
a
copy
of
the
SEG
itself.
Creating a backup
Backups
are
created
in
two
steps:
Step 1:
A
configuration
backup
is
first
created
as
a
single
file
in
local
volatile
SEG
memory.
This
is
done
with
the
CLI
command:
Device:/>
backup
‐
create
The
file
created
will
be
placed
in
the
logical
SEG
folder
called
“backup”
and
will
have
the
default
name
config
‐
YYYYMMDD.bak
,
where
YYYYMMDD
indicates
the
current
date.
To
specify
a
filename
for
the
backup
file,
the
command
is:
Device:/>
backup
‐
create
<
filename
>
Step 2:
Once
created,
backup
files
are
transferred
to
an
external
computer
by
downloading
the
files
from
the
security
gateway
using
SCP
(Secure
Copy).
As
stated
above,
all
backup
files
are
saved
in
an
SEG
logical
folder
called
backup
and
this
folder
needs
to
be
specified
in
SCP
commands.
It
is
important
to
note
which
SEG
hardware
the
backup
file
came
from
so
that
it
can
be
restored
to
a
processor
that
has
the
same
logical
interface
names
.
SCP
usage
is
described
further
in
Secure
copy
on
page
30
.
Note:
Backups
are
temporarily
kept
in
the
backup
folder.
They
are
not
held
in
permanent
memory
and
will
disappear
after
system
restarts.
Restoring a backup
Restoring
a
backup
is
also
a
two
step
process:
Step 1:
Use
SCP
to
upload
the
backup
file
to
the
target
security
gateway.
It
is
uploaded
to
the
SEG
logical
folder
called
backup
and
this
must
be
specified
in
the
SCP
command.
SCP
usage
is
described
further
in
Secure
copy
on
page
30
.
