Checkpoint Firewall Backup

Hi All,

I'm in need of some assistance.  I want to get a backup of my checkpoint configuration.  We are planning for disaster recovery and I need these files off site.  I've logged on as admin in expert mode.  

I've tried to export the configuration file from the Smart Dashboard, but don't see a 'browse' button.  My checkpoint config is running on Linux, not Windows.

Thanks in advance.
Who is Participating?
grimkinConnect With a Mentor Commented:
Are you sure you are in the $FWDIR/bin directory? Not the /usr/bin?

If not, check to see if it is in a different dorectory:

find / -name upgrade_export

If its not there, it will be on your installation CD or you can download it from Checkpoint's website - the binary is included in the upgrade_verifier bundle - here is the one you would need:

The best thing to do is take an upgrade_export - this will take your config and is totally platform-independent, should you decide in the future to change your OS.

Log in to the box in expert admin mode and run the following command:

$FWDIR/bin/upgrade_tools/upgrade_export -d <backup_name>

(the -d prints debug info to the console - not necessary but if by chance the upgrade_export should fail then it's nice to know why!)

This will run and create a .tgz file in the current working directory which you should ftp off the machine and keep in a secure place. It can be restored to any box by ftp'ing it back on and running the "$FWDIR/bin/upgrade_tools/upgrade_import <filename>" command.

It's also worth testing that your export works - I do this by creating a Checkpoint VM with SecurePlatform and importing the exported file to make sure there are no errors.

You can also take a belt and braces approach and perform a system backup too - if you're using SecurePlatform then you can do this via the web gui, otherwise use the standard linux backup.

Hope this helps!
jsctechyAuthor Commented:
Will that work on R55?
We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

Yes, shouldn't be any different at all. It's worth bearing in mind though that R55 is no longer supported by CheckPoint at all and if possible then you should look at upgrading to R65 or R70.
jsctechyAuthor Commented:
okay, I'm in the bin folder, but don't see upgrade_tools
jsctechyAuthor Commented:
Okay- I might have to download it, not listed in either BIN folder.  I do have a BACKUP folder- but that isn't the same, is it?
no, thats totally different ..
hi jsctechy,

Please make note that upgrade_export script is updated with every release, use the latest one to be sure that you can restore the backup. This tool just backsup all the rules base and any configuration changes that you may have done except the Routes.

Note: Routes is applicable only if your firewall Module and Smartcenter are on the same box, you have to backup the ROUTES on the Firewall seperatly.

Using the latest upgrade_export is only a good idea if you are actually upgrading your version of Checkpoint. If you are remaining with the same CP version then this is *not* advised.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.