Cisco Cisco Firepower Management Center 4000

Page of 1844
C H A P T E R
 
57-1
FireSIGHT System User Guide
 
57
Using Backup and Restore
Backup and restoration is an essential part of any system maintenance plan. While each organization’s 
backup plan is highly individualized, the FireSIGHT System provides a mechanism for archiving data 
so that the Defense Center or managed device can be restored in case of disaster. Note that backups are 
valid only for the product version on which you created them, and you cannot create or restore backup 
files for virtual managed devices or Sourcefire Software for  X-Series.
You can restore a backup onto a replacement appliance if the two appliances are the same model and are 
running the same version of the FireSIGHT System software. 
Caution
Do not use the backup and restore process to copy the configuration files between managed devices. The 
configuration files include information that uniquely identifies a device and cannot be shared.
By default, system configuration files are saved in the backup file. You can also choose to back up event 
data. You cannot back up captured files stored on the appliance.
Caution
If you applied any intrusion rule updates, those updates are not backed up. You need to apply the latest 
rule update after you restore.
You can save backup files to the appliance or to your local computer. Additionally, if you are using a 
Defense Center, you can use remote storage as detailed in 
Caution
Never insert a USB drive into any USB port on a 3D9900. Additionally, remove any device with external 
storage (for example, a KVM switch with external storage) from a 3D9900 before upgrading or restoring 
the device.
See the following sections for more information:
  •
See 
 for information about backing up files from the appliance. 
  •
 for information about creating backup profiles that you can 
use later as templates for creating backups. 
  •
See 
 for information about 
backing up managed devices with the Defense Center.
  •
See 
 for information about uploading backup files 
from a local host.