Software updates and backups
Update to the newest firmware as soon as possible to receive new security features and stability enhancements.
Regular configuration backups are also important.
Backups
Make a backup before doing anything that can cause large configuration changes, such as:
- upgrading the firmware
- entering the CLI commands
execute factory resetorexecute restore - clicking the Restore button in the System Information widget on the dashboard
To mitigate impact in the event of a network compromise, always password-encrypt your backups. If your operating system does not support this feature, you can encrypt the file using third-party software.
Once you have tested your basic installation and verified that it functions correctly, create a backup. Aside from being best practice, this "clean" backup can be used to:
- troubleshoot a non-functional configuration by comparing it with this functional baseline (via tools such as
diff) - rapidly restore your installation to a simple yet working point (see Restoring a previous configuration)
- batch-configure FortiRecorder appliances by editing the file in a plain text editor, then uploading the finalized configuration to multiple appliances (see Restoring a previous configuration)
After you have a working deployment, back up the configuration again after any changes. Then you can rapidly restore your configuration exactly to its previous state if a change does not work.
Backups can be performed on-demand, but you can also schedule FortiRecorder to make them regularly. Alternatively, you can also use FortiCentral to back up the FortiRecorder configuration.
|
Configuration backups do not include backups of video data or logs. For information about video backup, see Configuring external storage. |
To back up the configuration (on-demand)
-
Log in to the GUI as the
adminadministrator.Other administrator accounts do not have the required permissions.
-
Go to Dashboard > Status.
-
In the System Information widget, in the System configuration row, click Backup.
Alternatively, go to System > Maintenance > Configuration and click System configuration backup.
If your browser prompts you, navigate to the folder where you want to save the configuration file and click Save.
Your browser downloads the configuration file. Time required varies by the size of the file and the speed of your network connection, but could take several seconds.
To back up the configuration (scheduled)
-
Log in to the GUI as the
adminadministrator.Other administrator accounts do not have the required permissions.
-
Go to System > Maintenance > Configuration.
-
Expand the Scheduled Backup section.
-
Select the frequency, either:
- Not scheduled (disabled; backups are on-demand only)
- Daily
- These Days
and then configure:
- Max backup number: The maximum number of backup files. When this limit is reached, FortiRecorder will not make more backups until you delete an existing backup file.
- At hour: The time of day when the backup occurs, according to a 24-hour clock.
- days of the week (this option appears only if you selected These Days)
-
If you want to store backups on FortiRecorder local storage, then enable it.
-
If you want to store backups on a remote server, then enable it and expand that section. Configure the following settings:
Setting Name
Description
Protocol
Currently only SFTP is supported.
Server name/IP
Enter the domain name or IP address of the server.
User name
Enter the user name that FortiRecorder will use when it connects to the server.
Password
Enter the password for that user name.
Remote directory
Enter the path of the folder on the server, such as
/Users/FortiRecorder, where the FortiRecorder appliance will store the data. - Click Apply.
Restoring a previous configuration
If you downloaded a configuration backup, you can upload it to revert the appliance's configuration to that state.
Restoring the configuration can also be used to reconfigure the appliance from its default settings, after downgrading the firmware, or after a clean install.
|
Configuration files can also be used as a script to batch configure many features or appliances at once: download a configuration file backup, edit the file in a plain text editor such as Notepad++ or Microsoft Visual Studio Code, then upload the configuration to the FortiRecorder appliances. |
To upload a configuration via the GUI
-
Go to Dashboard > Status.
In the System Information widget, in the System configuration row, click Restore.
Alternatively, go to System > Maintenance > Configuration and click Restore Configuration.
-
Locate the FortiRecorder configuration backup file. (It has a
.conffile extension.) -
Click Upload.
Your web browser uploads the configuration file and the FortiRecorder appliance restarts with the new configuration. Time required to restore varies by the size of the file and the speed of your network connection. Your GUI session will be terminated when the FortiRecorder appliance restarts.
-
To continue using the GUI, if you have not changed the IP address and static routes of the GUI, refresh the page in your web browser and log in again.
Otherwise, to access the GUI again, in your web browser, modify the URL to match the new IP address of the network interface. For details, see Connecting to the FortiRecorder GUI.