Hello, I've been looking at the 'Database Revision Control' functionality in SmartCenter. You can configure it to create a new version each time a policy gets installed, only if the policy was changed. This will create a file $FWDIR/conf/db_versions/repository/x/ckp_mgmt_version.tar.gz This tar seems to contain all the required files, saving you the effort of figuring out which files are required.
Using a command line interface 'dbver' you can export and import different versions. Regards, Werner -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Shane Presley Sent: Tuesday, July 06, 2004 16:06 To: [EMAIL PROTECTED] Subject: [FW-1] Backing Up FW-1 Configs Hello, I have a distributed FW-1 environment, NG AI on Solaris 8. My machines (FWs and Management) get backed up to tape nightly. But during the day the firewall policy is under heavy change. I remember in the FW-1 4.0 days there were a serious of important files you had to backup to be able to recreate a policy/objects/etc. My thinking is that if I lose my management station at 5 PM, I'd like to be able to build a new box (from scratch or tape backup), but restore the objects/rulebases from a very recent time, say 4 PM. So before I would just tar/zip up the important files, then ship them off to another box. But I don't know what those are under NG AI. I know there is an upgrade_export script. But it requires user input (saying yes), so I'm not sure how I could script/cron that? Anyone know what files to tar/zip, or how to make upgrade_export cron-able? Shane ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
