Backups are stripped of sensitive information (such as usernames/passwords/preshared keys)

[Bharat_Kumar]

Are checkpoint backups stripped of sensitive information (such as usernames/passwords/preshared keys) when created ? 

[Lesley · Accepted solution]

It uses a hash to encrypt passwords, so nothing is stripped. To see what hash was used:

 show password-controls password-hash-type

To see PSK hash:

vpn dump_psk

To see Smartconsole password from mgmt:

psql_client cpm postgres -c "select fwset from dleobjectderef_data where name='<UserName>';" | grep internal_password

To see hash local GAIA users

show configuration user

I also assume you are fully updated and not running versions with known issues (like old CPinfo version). 

[Bharat_Kumar]

@Lesley Thanks for your response and clarification, yes it's fully updated, and a new Maestro build running at R81.20.