Maestro VSX backup via smartconsole

[Mali26]

Hi Folks,

 we were trying to take backup of VSX via smart console but it is failing, we have open a TAC case to check this but still unresolved. As per TAC backing up Gaia Management server is enough in case we require to restore VSX environment. Did the GAIA backup og Management server includes SECURITY POLICIES and VSX configuration ? or it must be taken via smart console of management server ?

[_Val_]

How do you mean, "backup via smartconsole"? What specific procedure are you referring to? 

That said, there is an SK article sk100395 that might answer your question, did you read it yet? When reviewing the article, please mind that Maestro backup is a bit different from regular Gaia backup. See sk174202 for more details.

[Mali26]

Does the Management server GAIA snapshot backup have security policies and VSX gateway configuration ? or just the network configuration of management server

[Dario_Perez]

Backup and Revision AFAIK are not supported on VSX, since the database integrity might be different from Management and VSX, the right backup for VSX is Snapshot and can be used during upgrade or hotfix installation or similar, in case you have any change after snapshot, then the snapshot might be outdated and reconfigure might be needed.  

for reconfigure you can export the configuration 

https://community.checkpoint.com/t5/Scripts/vsxexport-sh-Export-VSX-settings-and-configuration-files...

[_Val_]

Backups are supported. Revisions are not.

[Mali26]

Does the snapshot carries all access policies, Nat policies, VSX virtual switches and virtual system ?

[_Val_]

Snapshot of your management server, as well as the backup, has all of the above. To restore your VSX GWs, you will need to follow a special procedure, which is shared as an SK already in this discussion.

Backup is more economical, snapshot takes much more space as it contains binaries and OS packages. 

Once again, I encourage you to read sk100395 & sk174202

[Mali26]

Does the snapshot carries all access policies, Nat policies, VSX virtual switches and virtual system ?

[Dario_Perez]

yes