This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

backup/restore or export/import

hi all,

im going to backup before i upgarde from 19 > 19.5.3 > 20.0.0 and then i need to upgrade the fw for the ssd's as i have the pop up saying i need to

before this im going to take a backup incase things go south, now do i do this via backup or export (im thinking a backup will have everything)

if things do go south, what are the procedures i take to restore the backup, usb or do i connect via the web gui via my laptop via the rj45 console lead?

thanks,

rob

This thread was automatically locked due to age.

0 Erick Jan 9 months ago
Hi,

Thank you for reaching out to Sophos Community.

Backups contain the entire configuration on Sophos Firewall and are encrypted. You can save backups on Sophos Firewall, use FTP to save them on a server or email the backup. You can set up an automatic backup schedule or take a backup manually.

You may check more with the following KB for backup & restore best practice

Backup and restore
Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User1175 9 months ago in reply to Erick Jan

i know how you restore a backup on the web gui but what about if i have to restore from backup when the FW goes down
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to Sophos User1175

Hello Sophos User1175 ,

you can execute the following command in the advance shell to generate the backup:

/bin/opcode system_backup -s nosync

And then you can download it from the following directory: /var/conf/backupdata/

Which you can also get it via WINSCP: https://support.sophos.com/support/s/article/KB-000042152?language=en_US

You can use either FTP CLI Command or vis WINSCP Software
FTP CLI COMMAND:
curl --insecure --ftp-ssl ftp://ftp.sophos.com:990 -u <username>:<password> -T '<directory>'
curl --insecure --ftp-ssl ftp://ftp-insecure.sophos.com -u <username>:<password> -T '<directory>'

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User1175 9 months ago in reply to Vivek Jagad

how would i know if a "secure storage master key" has been set up if i want to restore the backup?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to Sophos User1175

you can reset secure storage master key.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User1175 9 months ago in reply to Vivek Jagad

but if all else fails and i cant restore the backup from the webgui, how can i do it ie from factory reset?

i imagine you factory reset the FW and once that you access the web UI via the management port and then you can restore from backup

support.sophos.com/.../KB-000043320

doc.sophos.com/.../index.html
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 9 months ago in reply to Sophos User1175
Essentially you can access the firewall via Default port 172.16.16.16:4444 and do the restore.

By the way: SFOSv20.0 has a build end system to prevent this to happen. See: https://partnernews.sophos.com/en-us/2023/11/products/sophos-firewall-v20-is-now-available/

Auto-rollback on Failed Firmware Updates reduces any disruption, including high-availability deployments.

So: Having a Backup and the SSMK is the best approach here.

You should enable Central Management as well, it will store the Backups (up to 5) for free as well.
__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Sophos User1175 9 months ago in reply to LuCar Toni

when you say default port, what port do you mean?
Cancel
Vote Up 0 Vote Down

Cancel