Fortinet black logo

Administration Guide

Backup or restore the system configuration

Copy Link
Copy Doc ID 4f5a6250-a945-11ec-9fd1-fa163e15d75b:750980
Download PDF

Backup or restore the system configuration

It is recommended that you create a system backup file as part of your maintenance plan. Always perform a backup before upgrading firmware or making major system configuration changes. Save these configuration backups to your management computer or external site in the event that you need to restore the system after a network event.

The FortiSandbox configuration file is in binary format and manual editing is not supported.

To backup the FortiSandbox configuration to your local management computer:
  1. Go to Dashboard > Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Local Backup, click Backup to save your backup file to your management computer.
To backup the FortiSandbox configuration to a remote server:
  1. Go to Dashboard >Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Remote Backup, configure the following settings:

    Server Type

    SCP server type is selected by default.

    Server Address

    Enter the server IP address.

    File Path

    Enter the file path.

    Username

    Enter the username to log in to the remote server.

    Password

    Enter the password to log in to the remote server.

    Backup Schedule

    Set the back up frequency.

  4. Click Set Remote Backup to save your settings.
To backup the configuration to a local FortiSandbox:
  1. Go to Dashboard >Status > System Information widget > System Configuration.
  2. Under Local Backup, click Local FSA. The Attention dialog opens.
  3. In the Please enter your comment field, type a description of the backup and click OK. The backup is added to the Total backup count table.
To restore the FortiSandbox configuration:
  1. Go to Dashboard > Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Restore, click Restore file, locate the backup file on your management computer, then click Restore to load the backup file.
  4. Select OK in the confirmation dialog box. Once the configuration restore process is completed, you will be redirected to the log in page.

By performing a system restore, all of your current configurations will be replaced with the backup data. When users select Restore Administrators, Admin Profiles, Certificates, LDAP Servers and Radius Servers, all of this information will be overridden; otherwise, current settings are kept. The system will reboot automatically to complete the restore operation. Only backup configurations from the previous or same release are supported.

Caution

When you restore a backup configuration from to a unit in cluster mode, the network configuration and HA cluster related configuration are not restored. The unit will be in standalone mode. You will need to configure the network settings and add the unit back to cluster.

To backup the FortiSandbox configuration using SCP or TFTP:
  1. Open a CLI console window.
  2. Enter the backup-sysconf command followed by the following syntax:

backup-sysconf [-s|-t[scp|tftp]|-u|-f]

The options available are as follows:

-h Help Information

-s Remote SCP/TFTP server IP

-t Protocol type: SCP or TFTP

-u Scp/tftp user name

-f Remote server folder and the backup file name

Example 1:

backup-sysconf –s1.2.3.4 –utest –tscp –f/home/test/fsa/backup.conf

Example 2:

backup-sysconf –s1.2.3.4 –utest –ttftp –f/home/test/fsa/backup.conf

To restore the FortiSandbox configuration using SCP, FTP or TFTP:
  1. Open a CLI console window.
  2. Enter the restore-sysconf command followed by the following syntax:

restore-sysconf [-s|-t[scp|tfp|tftp]|-u|-f|-o]

The options available are as follows:

-h Help Information

-s Remote SCP/FTP/TFTP server IP

-t Protocol type: SCP, FTP or TFTP

-u Scp/ftp/tftp user name

-f Remote server folder and the backup configuration file name

-o [Optional] Restore Administrators, Admin Profiles, Certificates, LDAP Servers and Radius Servers

Example 1:

restore-sysconf –s1.2.3.4 –utest –tscp –f/home/test/fsa/backup.conf -o

Example 2:

restore-sysconf –s1.2.3.4 –utest –ttftp –f/home/test/fsa/backup.conf

Example 3:

restore-sysconf –s1.2.3.4 –utest –tftp –f/fsa/backup.conf -o

Backup or restore the system configuration

It is recommended that you create a system backup file as part of your maintenance plan. Always perform a backup before upgrading firmware or making major system configuration changes. Save these configuration backups to your management computer or external site in the event that you need to restore the system after a network event.

The FortiSandbox configuration file is in binary format and manual editing is not supported.

To backup the FortiSandbox configuration to your local management computer:
  1. Go to Dashboard > Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Local Backup, click Backup to save your backup file to your management computer.
To backup the FortiSandbox configuration to a remote server:
  1. Go to Dashboard >Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Remote Backup, configure the following settings:

    Server Type

    SCP server type is selected by default.

    Server Address

    Enter the server IP address.

    File Path

    Enter the file path.

    Username

    Enter the username to log in to the remote server.

    Password

    Enter the password to log in to the remote server.

    Backup Schedule

    Set the back up frequency.

  4. Click Set Remote Backup to save your settings.
To backup the configuration to a local FortiSandbox:
  1. Go to Dashboard >Status > System Information widget > System Configuration.
  2. Under Local Backup, click Local FSA. The Attention dialog opens.
  3. In the Please enter your comment field, type a description of the backup and click OK. The backup is added to the Total backup count table.
To restore the FortiSandbox configuration:
  1. Go to Dashboard > Status > System Information widget > System Configuration.
  2. Click the Backup/Restore line beside System Configuration.
  3. Under Restore, click Restore file, locate the backup file on your management computer, then click Restore to load the backup file.
  4. Select OK in the confirmation dialog box. Once the configuration restore process is completed, you will be redirected to the log in page.

By performing a system restore, all of your current configurations will be replaced with the backup data. When users select Restore Administrators, Admin Profiles, Certificates, LDAP Servers and Radius Servers, all of this information will be overridden; otherwise, current settings are kept. The system will reboot automatically to complete the restore operation. Only backup configurations from the previous or same release are supported.

Caution

When you restore a backup configuration from to a unit in cluster mode, the network configuration and HA cluster related configuration are not restored. The unit will be in standalone mode. You will need to configure the network settings and add the unit back to cluster.

To backup the FortiSandbox configuration using SCP or TFTP:
  1. Open a CLI console window.
  2. Enter the backup-sysconf command followed by the following syntax:

backup-sysconf [-s|-t[scp|tftp]|-u|-f]

The options available are as follows:

-h Help Information

-s Remote SCP/TFTP server IP

-t Protocol type: SCP or TFTP

-u Scp/tftp user name

-f Remote server folder and the backup file name

Example 1:

backup-sysconf –s1.2.3.4 –utest –tscp –f/home/test/fsa/backup.conf

Example 2:

backup-sysconf –s1.2.3.4 –utest –ttftp –f/home/test/fsa/backup.conf

To restore the FortiSandbox configuration using SCP, FTP or TFTP:
  1. Open a CLI console window.
  2. Enter the restore-sysconf command followed by the following syntax:

restore-sysconf [-s|-t[scp|tfp|tftp]|-u|-f|-o]

The options available are as follows:

-h Help Information

-s Remote SCP/FTP/TFTP server IP

-t Protocol type: SCP, FTP or TFTP

-u Scp/ftp/tftp user name

-f Remote server folder and the backup configuration file name

-o [Optional] Restore Administrators, Admin Profiles, Certificates, LDAP Servers and Radius Servers

Example 1:

restore-sysconf –s1.2.3.4 –utest –tscp –f/home/test/fsa/backup.conf -o

Example 2:

restore-sysconf –s1.2.3.4 –utest –ttftp –f/home/test/fsa/backup.conf

Example 3:

restore-sysconf –s1.2.3.4 –utest –tftp –f/fsa/backup.conf -o