topic Re: Is it possible backup 730 device and logs to USB? in Spark Firewall (SMB)

Is it possible backup 730 device and logs to USB?

Thomas_Dunlap — Fri, 08 Dec 2017 16:09:24 GMT

Trying to find documentation on HowTo do the backup and saving logs to a USB thumbdrive in a remote FW location. Is this achievable using CLI? Is this available in the WebUI?

CLI says:

backup settings to usb [filename <filename>] ....

Is it possible to script this on a weekly basis

Re: Logs. Can they be saved to the USB?

Any help is greatly appreciated

Re: Is it possible backup 730 device and logs to USB?

PhoneBoy — Sat, 09 Dec 2017 07:11:52 GMT

As far as I know, this is not currently possible.

Re: Is it possible backup 730 device and logs to USB?

G_W_Albrecht — Mon, 05 Feb 2018 08:40:07 GMT

This is very easy done manually - if you connect using WinSCP (with the USB connected and mounted), you can see the backup (created manually before connecting) or the last version of a scheduled backup) as /storage/mySMB_1_R77.20.75_990172238_2018-Feb-05-01_32_00.zip and the USB medium on port 1 as /mnt/usb1/ !

So when connected via SSH, a copy to USB can be performed very easy! But scripting is the weak point here: On SMB devices, no cron job is possible. So e.g. to issue a reboot every two weeks, we need to trigger this over SSH. Details can be found in sk106836 How to configure SSH authentication using RSA key files on Security Gateway 80 / 600 / 700 / 1100 / 1200R/1400 appliance. Remember to keep the passphrase empty when generating the key pair ! On the SMB box, we create the file /pfrm2.0/etc/myreb.sh :
#!/bin/bash -f
date >> /pfrm2.0/etc/lastReboot
(echo y ) | reboot
On the unit that shall issue the command (based on GAiA or Unix) we follow sk95890 How to configure SSH authentication on Gaia OS using RSA key files and create /home/admin/sshreb.sh :
#!/bin/bash -f
ssh -i /home/admin/MyKey ip.x.x.x sh -l ./pfrm2.0/etc/myreb.sh
After first connect per ssh, the script is able to login and perform reboot automatically after called using cron ! This is easy e.g. on a Gaia device. Such a script is also able to perform TP Updates automatically, but at different scheduled times for each blade using the online_update_cmd !

Hope this helps a bit 😉

Re: Is it possible backup 730 device and logs to USB?

G_W_Albrecht — Mon, 05 Feb 2018 11:36:34 GMT

Just to add two other bits:

1. The CLI syntax from the question is also very usable for settings backup:

[730GW]# backup settings to usb file-encryption on password admin backup-policy on add-comment check_point_new_configuration

But without cron, we can not schedule scripts on the SMB device itself.

2. Concerning Logs: It is possible to use a SD Card for logging, but not a USB medium. The problem with manual log copies is that the logs are not readable - you would have to copy them again to the SMB device to be able to read them! But it is possible to use fwm logexport CLI command from sk118519 "fwm logexport" command to save the fw log as ASCII to e.g. USB. But for logging itself, the answer is no !