This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Backup Password Verification

Hi,

I wonder if anyone knows the encryption algorithm used for Sophos XG Backup files.

Or better, if Sophos provides a way to verify the backup files without restoring it.

Because restoring the backup files will require downtime, which no one likes, and verifying the backup files on frequent basis is a requirements of the operational team.

Any idea / hint / lead would be appreciated.

Regards,

This thread was automatically locked due to age.

Top Replies

Antonio Cienfuegos S over 4 years ago in reply to Kinan Akel +2 verified

Run this command in a Linux box or Windows WSL: openssl enc -d -aes-256-cbc -in nameofbackupfile -out backup.xg.tgz -md md5 -pass pass:passwordforthebackup Then, the TAR file (backup.xg.tgz) needs…

Parents

0 Antonio Cienfuegos S over 4 years ago

Basically, you can open it with OpenSSL (at least for v17). Inside you'll the db dump of the firewall and other files.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kinan Akel over 4 years ago in reply to Antonio Cienfuegos S

Thanks for the reply.
How exactly I'm supposed to use OpenSSL to open it? Could you please elaborate on that?
Cancel
Vote Up 0 Vote Down

Cancel
+1 Antonio Cienfuegos S over 4 years ago in reply to Kinan Akel

Run this command in a Linux box or Windows WSL:

openssl enc -d -aes-256-cbc -in nameofbackupfile -out backup.xg.tgz -md md5 -pass pass:passwordforthebackup

Then, the TAR file (backup.xg.tgz) needs to be extracted.

INFO: While you can take a look at the backup to know how some things work, its totally NOT recommended to edit the dumpdb file and then load it again in a firewall.
Cancel
Vote Up +2 Vote Down

Cancel
0 Kinan Akel over 4 years ago in reply to Antonio Cienfuegos S

Thanks a lot
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Kinan Akel over 4 years ago in reply to Antonio Cienfuegos S

Thanks a lot
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data