How do I back up and restore TRITON appliances?

Backup and Restore | Web and Email Protection Solutions | 15-Dec-2016


Applies to:	TRITON AP-WEB and Web Filter & Security, v8.3.x TRITON AP-EMAIL, v8.3.x

Two types of backup are available on TRITON appliances:

A full appliance configuration backup saves the appliance controller and all installed modules.

Forcepoint LLC, recommends running a full backup on every appliance in your network on a regular basis. Note that the full backup file may be smaller than the module backup files, because of the compression used.

A module configuration backup saves configuration information for the selected module (Web or Email).

This includes any client and policy data stored on the selected appliance.

Web module backups include only data in the Web container. Neither the Network Agent or Content Gateway modules are included.

Separate Content Gateway backups can be performed in the Content Gateway manager. See How do I back up and restore Content Gateway?, page 16.

To include all modules, perform a full appliance backup.


	Important Backups can be restored only on TRITON appliances of the same type and version. Thus, a V10000 G4, version 8.3 backup can be restored only on a V10000 G4, version 8.3 appliance. For complete details, see Restoring your appliance configuration, page 7.

Running the appliance backup utility

Log on to the TRITON appliance command-line interface (CLI) and elevate to the config mode.

To perform an immediate backup use:

create backup now --type <full|web|email>
--location <local|filestore_alias>
[--desc "<description>"]

local places the backup file on the appliance.

filestore_alias places the backup in the remote storage location defined by filestore_alias. For information about defining a filestore_alias, see the TRITON Appliances CLI Guide.

To create scheduled backups use:

create backup schedule --type <full|web|email>

--location <local|filestore_alias>

--freq <daily|weekly|monthly>

--day <Mon|Tue|Wed|Thu|Fri|Sat|Sun>

--date <integer> --time <hh:mm>


	Important If you want to create backup files for multiple appliances on the same remote machine, use a separate directory for each appliance's backup files. This makes it easier to locate the backup file for a specific appliance and avoids the possibility of conflicts that could lead to files being mistakenly overwritten or deleted.

Restoring your appliance configuration

When you initiate the restore process, all current settings for the appliance or module are erased. Backup files stored on the appliance are not affected.

When the restore completes, the appliance automatically restarts.

To restore an appliance or module to a saved configuration:

Use the WebsenseAdmin stop command to stop all software components running off the appliance.

For example, stop Log Server, Sync Service, Linking Service, transparent identification agents, and components on the TRITON management server machine.

Windows: Navigate to the C:\Program Files or Program Files (x86)\Websense\Web Security\ folder.

Linux: Navigate to the /opt/Websense/ directory.

To restore a full or module appliance backup, in the TRITON appliance CLI use:

restore backup --location <local|filestore_alias>
[--file <file_name>]

To see a list of available backups use:

show backup list --location <local|filestore_alias>

When you restore a full appliance configuration:

The current appliance version must match the version associated with the backup file. Thus, a version 8.3 backup can be restored only on an appliance that is at version 8.3.

The hardware model of the current appliance must be the same as the model that was backed up. For example, a backup from model V10000 G4 must be used to restore a model V10000 G4.

The current appliance mode (TRITON AP-EMAIL, TRITON AP-WEB, or Web Filter & Security) must match that of the backup file. For example, a backup from an email appliance must be used to restore an email appliance.

The current appliance policy source mode (Full policy source, User directory and filtering, or Filtering only) must match the policy source mode in effect when the backup file was created.

User directory and filtering and Filtering only appliances must have retained the same policy-source IP address that was captured in the backup.

The original appliance that was backed up cannot also be running elsewhere in the network. Restoring a full configuration re-creates the original appliance and makes use of unique ID numbers from that appliance.

Use the WebsenseAdmin start command to start the components that are running off the appliance.

Windows: Navigate to the C:\Program Files or Program Files (x86)\Websense\Web Security\ folder.

Linux: Navigate to the /opt/Websense/ directory.