Backing Up and Restoring a Domain

Run this API:

For API documentation, see the Check Point Management API Reference - search for backup-domain.

1. Make sure it is possible to restore the Domain

   Before you can restore a Domain, you must delete the current Domain.

   Before you delete the current Domain, make sure it is possible to restore it.

   Run this API with the "verify-only" flag:

   restore-domain

   For API documentation, see the Check Point Management API Reference - search for restore-domain.

2. Delete the current Domain

   Before you can restore a Domain, you must delete the current Domain.

   You can perform this step in one of these ways:

   • In SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. connected to the MDS context

   • With the API delete domain (see the Check Point Management API Reference)

3. Restore the Active Domain Management Server

   Run this API:

   restore-domain

   For API documentation, see the Check Point Management API Reference - search for restore-domain.

4. Restore the Standby Domain Management Servers and Domain Log Servers

   When you restore the Standby Domain Management Servers and Domain Log Servers, they must have the same IP addresses that were used when you collected the Domain backup.

   For API documentation, see the Check Point Management API Reference - search for set domain

   For each Standby Domain Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server., run this API:

   set-domain name <Name or UID of Domain> servers.add.ip-address <IP Address of Domain Management Server> servers.add.name <Name of Domain Management Server> servers.add.multi-domain-server <Name of Multi-Domain Server> servers.add.backup-file-path <Full Path to Domain Backup File>.tgz --format json

   For each Domain Log Server Dedicated Check Point server that runs Check Point software to store and process logs., run this API:

   set-domain name <Name or UID of Domain> servers.add.ip-address <IP Address of Domain Log Server> servers.add.name <Name of Domain Log Server> servers.add.multi-domain-server <Name of Multi-Domain Server> servers.add.backup-file-path <Full Path to Domain Backup File>.tgz --format json servers.add.type "log server"

5. Configure and assign the Administrators and GUI clients

   You must again configure the Multi-Domain Server Administrators and GUI clients and assign them to the Domains.

   1. Configure the Multi-Domain Server Administrators and GUI clients:

      1. Run the mdsconfig command

      2. Configure the Administrators

      3. Configure the GUI clients

   2. Assign the Administrators and GUI clients to the Domains:

      See the R81 Multi-Domain Security Management Administration Guide - Chapter Managing Domains - Section Creating a New Domain and Section Assigning Trusted Clients to Domains.

6. Install policy on all managed Security Gateways and Clusters

   1. Connect with SmartConsole to the restored Active Domain.

   2. Install the applicable policies on all managed Security Gateways and Clusters.