Backing Up and Restoring the System

Important:

You can restore a backup file on Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS with the same software version, Jumbo Hotfix Accumulator Collection of hotfixes combined into a single package. Acronyms: JHA, JHF, JHFA., and hotfixes as installed on the source Gaia OS, on which you collected this backup file.
If you restored a backup on a Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. / Cluster Member Security Gateway that is part of a cluster., install the Security Policy Collection of rules that control network traffic and enforce organization guidelines for data protection and access to resources with packet inspection..
To back up the Quantum Maestro Orchestrator configuration, follow the instructions in sk174202.
Maestro Security Groups that contain different Security Appliance models do not support Gaia Backup operations (in the Global Gaia Portal Web interface for the Check Point Gaia operating system. or Global Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell).).

To collect or import a Gaia Backup in such a Security Group, connect directly to Gaia Portal or Gaia Clish on each Security Appliance in the Security Group.

Note - Gaia Operating System uses this template for the name of a manual backup output file regardless of the Gaia Display Format for Time and Date:

backup_--_<HostName>.<Domain>_<DD>_<MMM>_<YYYY>_<HH>_<MM>_<SS>.tgz

Example for 20 Nov 2022, 18:04:43:

backup_--_MyGW.MyDomain.com_20_Nov_2022_18_04_43.tgz

Excluding Files from the Gaia Backup

Background

The Gaia Operating System contains backup configuration files (schema files) that control which files to collect during the backup for different software modules.

File	Software Blade / Feature	Security Gateway	Management Server, Log Server
`/var/CPbackup/schemes/cvpn.cpbak`	Mobile Access Check Point Software Blade on a Security Gateway that provides a Remote Access VPN access for managed and unmanaged clients. Acronym: MAB.
`/var/CPbackup/schemes/dlp_gw.cpbak`	Data Loss Prevention Check Point Software Blade on a Security Gateway that detects and prevents the unauthorized transmission of confidential information outside the organization. Acronym: DLP.
`/var/CPbackup/schemes/dtps.cpbak`	Desktop Policy Server for SecureClients
`/var/CPbackup/schemes/fg1.cpbak`	QoS Check Point Software Blade on a Security Gateway that provides policy-based traffic bandwidth management to prioritize business-critical traffic and guarantee bandwidth and control latency.
`/var/CPbackup/schemes/fw1.cpbak`	Firewall
`/var/CPbackup/schemes/fw1logs.cpbak`	Firewall Logs
`/var/CPbackup/schemes/ioc.cpbak`	External IoC Feeds
`/var/CPbackup/schemes/mgmts.cpbak`	Network Management
`/var/CPbackup/schemes/ppak.cpbak`	SecureXL Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway.
`/CPbackup/schemes/rt.cpbak`	SmartReporter
`/var/CPbackup/schemes/rtm.cpbak`	Monitoring
`/var/CPbackup/schemes/scalable_platform.cpbak`	Scalable Platforms (Maestro and Chassis)
`/var/CPbackup/schemes/snapshot.cpbak`	Snapshot Utility
`/var/CPbackup/schemes/svn.cpbak`	Common Infrastructure ($CPDIR)
`/var/CPbackup/schemes/system_configuration.cpbak`	Gaia OS
`/var/CPbackup/schemes/te.cpbak`	Threat Emulation Check Point Software Blade on a Security Gateway that monitors the behavior of files in a sandbox to determine whether or not they are malicious. Acronym: TE.
`/var/CPbackup/schemes/uepm.cpbak`	Endpoint Policy Management Check Point Software Blade on a Management Server to manage an on-premises Harmony Endpoint Security environment.
`/var/CPbackup/schemes/vsx.cpbak`	VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts.
`/var/CPbackup/schemes/vsx_mgmt.cpbak`	VSX Policy

Procedure

Step

Instructions

Connect to the Command Line on the Gaia Server.

Back up the current configuration file:

cp -v /var/CPbackup/schemes/<Name-of-File>.cpbak{,_BKP}

Edit the current configuration file:

vi /var/CPbackup/schemes/<Name-of-File>.cpbak

Make the required changes in the applicable section:

The section <INCLUDE_FILES> controls which files to include during the backup.
The section <EXCLUDE_FILES> controls which files not to include during the backup.

Save the changes in the file and exit the editor.

Backing Up and Restoring the System in Gaia Portal

Creating a backup

Step

Instructions

In the navigation tree, click Maintenance > System Backup.

Refer to the Local Backup section.

Click Backup.

Select the location of the backup file:

This appliance

To store the collected backup locally
Management

To send the collected backup to the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages this Security Gateway.
SCP server

To send the collected backup to an SCP server.

Enter the IPv4 address, User name, Password and Upload path.
FTP server

To send the collected backup to an FTP server.

Enter the IPv4 address, User name, Password and Upload path.
TFTP server

To send the collected backup to a TFTP server

Enter the IPv4 address.

Important:

Gaia Portal does not support the change of backup file names. You can change a backup file name in the Expert mode. Make sure not to use special characters.

Gaia OS backup on Quantum Maestro Orchestrators does not contain the Maestro configuration files (for example, sgdb.json).

To back up the Quantum Maestro Orchestrator configuration, use this Gaia Clish command on the Quantum Maestro Orchestrator:

set maestro export <options>

For a use case, see sk174202.

Restoring from a locally saved backup

Step

Instructions

In the navigation tree, click Maintenance > System Backup.

Refer to the Local Backup section.

Select the backup file.

Click Restore.

Restoring from a remotely saved backup

Step	Instructions
1	In the navigation tree, click Maintenance > System Backup. Refer to the Local Backup section.
2	Click Restore Remote Backup.
3	Enter the full name of the backup file on a remote server.
4	Select the location of the backup file: Management To restore the backup from the Management Server that manages this Security Gateway SCP server To restore the backup from an SCP server. Enter the IPv4 address, User name, Password and Upload path. FTP server To restore the backup from an FTP server. Enter the IPv4 address, User name, Password and Upload path. TFTP server To restore the backup from a TFTP server. Enter the IPv4 address.
5	Click Restore.

Exporting an existing backup

Step	Instructions
1	In the navigation tree, click Maintenance > System Backup. Refer to the Local Backup section.
2	Select the backup file.
3	Click Export.
4	Click OK to confirm. Make sure you have enough free disk space on your computer.

Importing a backup

Step	Instructions
1	In the navigation tree, click Maintenance > System Backup. Refer to the Local Backup section.
2	Select the backup file.
3	Click Import.
4	Click Browse and select the backup file on your computer.
5	Click Import.

Deleting a backup

Step	Instructions
1	In the navigation tree, click Maintenance > System Backup. Refer to the Local Backup section.
2	Select the backup file.
3	Click Delete.
4	Click OK to confirm.

Backing Up the System in Gaia Clish

Syntax

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Important:

Gaia Clish does not support the change of backup file names. You can change a backup file name in the Expert mode. Make sure not to use special characters.

Restoring the System in Gaia Clish

Syntax

Note - To restore the Gaia OS configuration quickly after a system failure or migration, use the Gaia Clish "configuration" feature (see Working with System Configuration in Gaia Clish).