- Products
- Learn
- Local User Groups
- Partners
- More
Firewall Uptime, Reimagined
How AIOps Simplifies Operations and Prevents Outages
Introduction to Lakera:
Securing the AI Frontier!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
Hello, Team.
Could you tell me, what is the syntax of the command, to generate a "BACKUP of the policy package" of my Security Management Server?
Currently, I have an Open Server, running a SMS in version R81.10, and we only need a Backup of the policies (it is not an option now, to take a Snapshot).
We understand that the ./ migrate export is no longer "recommended".
We only need to have the BACKUP, in case of any "eventuality" for a pending work window.
Please, could you tell me what would be the correct command that can help us to get the Backup?
Greetings.
You can run a backup with the backup command and download it and restore on the same server if needs be.
For an export that you can restore a freshly installed SMS you can run in Expert mode $FWDIR/scripts/migrate_server export -v R81.10 absolute_path/yourserver.tgz
Depending on your situation there are flags to ignore errors, skip upgrade tools verification, include logs and so on.
You find all this in the R81.10 SMS administration guide.
Download the file and run the same command with import instead of export on a test SMS VM to check if everything gets restored correctly.
Hello, Alex.
Thanks for your reply.
If I want to take the Backup, and that it is saved, maybe, in the directory /var/tmp ....
The syntax would be something like this:
"$FWDIR/scripts/migrate_server export -v R81.10 /var/temp/BKPSMS.tgz"
Is my syntax correct?
That's correct, the system will ask you to cpstop or ensure all sessions are closed also.
Alex,
Is it an "expected behavior" the fact that, when trying to get a Backup of the SMS policy package, the system, if or if it "restarts"?
Is this normal?
Is there a way to generate the same Backup, but avoiding the MGMT "restart"?
If by restart you mean reboot, I haven't seen backups and exports causing this behaviour.
I generally do a cpstop when exporting for security but backups should run live without interrupting the system.
Agree, good point.
So, I just run the syntax I explained above?
By "reboot" I mean the "fear" that by executing the command in the SMS CLI, the device as such, reboots, i.e. reboots.
This is not the case, is it?
Anyway, I understand that there would not be any service impact, as it is simply MGMT.
Thats is bro, no need to worry, as @PhoneBoy said, it will perform cpstop anyway, not a reboot.
Andy
Hello, Alex.
This package that you manage to export with the command you mentioned, can it be "imported" into a new VM?
I want to replicate the "policy package" in a new VM that I am going to raise.
An additional doubt, when we "export" the policy package, how is the SMS licensing issue handled?
Is the licensing something that is "exported" with the policy package?
To be exceptionally clear: you are exporting the entire management configuration database with migrate_server export.
This includes everything you can configure in SmartConsole (including licenses), but does NOT include the Gaia OS host/interface configuration.
And yes, this can be imported into a new VM, provided it is the same version specified as part of the export.
Hello, good morning.
The command $FWDIR/scripts/migrate_server export -v R81.10 /var/temp/BKPSMS.tgz helped me export the SMS configuration from a virtual machine that is giving me problems.
Please, I need to know the command to be able to import the backup that I previously exported (I want to import this backup to a new virtual machine that I already have deployed)
I also need to know the path to where this backup should point.
Just check import section command at the bottom of the sk.
Andy
What @PhoneBoy told you is how it works. Licenses are also imported to a new server, but IP/hostname are unchanged.
Andy
A cpstop is generally performed when using the migration tools, yes.
If this is a standalone box (gateway and management on same system), then this will cause an outage.
You got it.
Andy
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
14 | |
12 | |
11 | |
9 | |
8 | |
7 | |
5 | |
5 | |
5 | |
5 |
Tue 07 Oct 2025 @ 10:00 AM (CEST)
Cloud Architect Series: AI-Powered API Security with CloudGuard WAFThu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Thu 09 Oct 2025 @ 10:00 AM (CEST)
CheckMates Live BeLux: Discover How to Stop Data Leaks in GenAI Tools: Live Demo You Can’t Miss!Wed 22 Oct 2025 @ 11:00 AM (EDT)
Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents OutagesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY