Backup tools are for disaster recovery. And sometimes for cloning an environment in lab for replicating a problem.
When running into a big issue on the Management server and need to restore to a working environment we need a fast and reliable restore process ( like a restore from a VMware snapshot)
I am working with Checkpoint products for 26 yours and I have never seen a Checkpoint backup tool which has done a good job for this ...
For the current version ( R80.40 with Management Server/MDS) see my notes for the existing tools:
- GAIA backup ---> includes mds_backup (see below). Backup file size is big. (IMHO) terrible way how cli options and parameters where implemented (not intuitive and lack of functionality)
- GAIA snapshot ---> Size !(...), no simple way to forward it to another network storage.
---> has someone really used GAIA snapshots as a source for disaster recoveries ? I do not know of anyone
- mds_backup ---> for recovery it depends on exact SW versions ( including all (private) hotfixes)
---> mds_restore overrides Registry keys
---> do we need the binaries in a backup, when restore has the requirement of the exact same hotfix level?(..)
- migrate_server ---> new tool, but not usable for daily backups - Management server has to be stopped !!
---> tool version changes (it updates itself automatically).
---> Can we reliable restore from a backup file taken from an old build of migrate_server export ?
- migrate_export ---> not supported anymore !(?)
---> not usable for MDS !(?) (I know, mds_export.sh (on the ISO) used it for MDS, too !)
- single command for Management Server and MDS
- backuptool should not stop cpm/fwm; administrators working 24hrs!
- (almost) independent of (jumbo)hotfix level.
- (simple) restore into an existing environment (should not require a clean/new install)
( it should cleanup existing environment before)
- should be able to forward backup file to a server with SCP/SSH w/o (!) the use of a password ( RSA public key !)
- import/restore should not take several hours.
- relative small size ( size like we see with migrate_server is ok )
"migrate export" was a flexible tool, that brought some points closest to the functionality we need. But it was not intended for MDS, too.
Thanks for any comments on this.