Disaster recovery

It is important to plan what to do in the event that a disaster occurs. Disaster recovery starts with a business continuity plan. This plan should be all-encompassing, and include your FortiGate.

FortiGate disaster recovery should include:

• A tested plan:

  • Without testing the plan, you cannot be sure that it will work.

  • Testing helps to uncover oversights and refine the process.

• Configuration backups:

  • Backups should be made on a schedule, and after any changes have been made to the configuration.

  • It is good practice to evaluate if any unexpected changes occur between backups.

• Remote site assistance:

  • Who will load the configuration backup to the FortiGate?

  • In the event of an RMA, who will install the replacement FortiGate?

  • Do all of the people who will require it have access to the FortiGate?

• Replacement hardware:

  • If the device is covered under warranty, what level of support has been purchased?

  • What is the agreed expectation for a replacement?

  • How will the backup configuration be loaded onto the new device?

After a disaster, review the recovery to asses what worked, what did not work, and what can be improved. Unfortunately, sometimes a disaster helps get approval for a more robust solution, such as HA or a premium support contract with better SLAs.