Backup - management server - migrate export vs system backup

[JorgenSpange]

Hi!

We're running our management on R81.10 with two dedicated vm's for management and log server.

These days we're looking into our backup and restore routines.
Until now we have been doing backup by scheduling migrate exports and chronjobs for copying the export to a scp-server.
This requires some degree of overhead in regards to custom scripts and chronjobs, so we have been looking into using "system backup" in gaia instead.

It seems to me like this is easier to handle and that you take backup the clish config and all necessary file such as vpnroute.conf in the same backup.

But we're not sure about this so my question is:
What is the trade off by using system backup instead of migrate export, what's the best practice for backup, and what are you guys doing for backup?

Feedback is much appreciated!

br
Jørgen

[Tal_Paz-Fridman · Accepted solution]

Hi

I would recommend going over the following SK and CheckMates post:

Best Practices - Backup on Gaia OS

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

VMware backup vs migrate export vs Gaia snapshot

https://community.checkpoint.com/t5/Management/VMware-backup-vs-migrate-export-vs-Gaia-snapshot/td-p...

[the_rock]

Put it this way...backup is more for the scenarios where say you make a change on the server and something does not work right and you simply wish to restore to working condition, you can do the restore from latest working backup...link @Tal_Paz-Fridman also explains that. Migrate export (or migrate server) starting from R80.20 is what you would use if you wish to, for example, import all the objects and licenses, along with policy rules (packages), vpn communities, etc, into the new management server.

Andy

[K_montalvo]

Here is a good video on that of the Great Magnus, go check it out!

https://youtu.be/EHQZ2KgFgl0

[JorgenSpange]

Thanks all for the feedback, much appreciated!
From what I understand we want backup for disaster recovery and migrate_export is the one best suited for this.