> Source: [sk108902](https://support.checkpoint.com/results/sk/sk108902) # sk108902 - Best Practices - Backup on Gaia OS | Property | Value | |----------|-------| | Solution ID | sk108902 | | Date Created | 2015-11-30 | | Last Modified | 2026-07-26 | | Technical Level | General | | Products | Security Gateway, Security Management Server, Multi-Domain Security Management Server | | Versions | R82.10, R82, R81.20, R81.10 (EOS), R82.10, R82, R81.20, R82.10, R81 (EOS), R81.10 (EOS), R81 (EOS), R81 (EOS), R81.10 (EOS), R81.20, R82 | | OS | Gaia | ## Solution **Table of Contents:** 1. Introduction 2. Snapshot Management 3. System Backup (and System Restore) 4. Save Configuration (and Load Configuration) 5. Recommended backup plan 6. Recommended steps in case of Disaster Recovery 7. Related backup tools 8. Comparison of backup methods 9. Related documentation 10. Related solutions ### 1. Introduction {#Introduction} There are a few methods to perform a backup of your Check Point system running Gaia OS. They differ by size, time of creation and content. This article provides overview of all available backup methods and recommendation for configuring an effective backup scheme. The built-in Gaia backup procedures: * Snapshot Management * System Backup (and System Restore) * Save/Show Configuration (and Load Configuration) All methods can be used to back up your Security Gateways, Security Management and Multi-Domain Server. All methods are appliance-specific and can only be restored on the same model of appliance. ### 2. Snapshot Management {#Snapshot Management} The snapshot creates a binary image of the entire root (*lv_current*) disk partition. This includes Check Point products, configuration, and operating system. Exporting an image from one machine and importing that image on another machine of the same type ***is*** supported. The *log* partition is not included in the snapshot. Therefore, any locally stored FireWall logs will not be saved. ### 3. System Backup (and System Restore) {#System Backup (and System Restore)} System Backup can be used to back up current system configuration. A backup creates a compressed file that contains the Check Point configuration. This file includes the networking and operating system parameters, such as routing and interface configuration etc., but unlike a Gaia snapshot, it does not include the operating system, product binaries, and hotfixes. **Note: A Gaia backup, unlike a Gaia snapshot, can be restored on the same or a different appliance running the same Check Point Gaia OS version and hotfixes.** ### 4. Save Configuration (and Load Configuration) {#Save Configuration (and Load Configuration)} Allows saving Gaia OS configuration settings as a ready-to-run CLI script. This allows you to review your current setup and quickly restore the Gaia OS configuration. ### 5. Recommended Backup Plan {#Recommended backup plan} For complete backup of the system and maximum confidence, Check Points recommends combining all three methods as part of the backup plan (Snapshot Management, System Backup/Restore, Save/Load Configuration). This allows multiple restore points, redundancy, and reliability of overall restore procedure. Collect: * Snapshot - after a fresh installation, before an upgrade, and before a hotfix installation. * Scheduled Backup - monthly or weekly, depending how frequently you perform changes in your configuration and policy. ### 6. Recommended Steps in Case of Disaster Recovery {#Recommended steps in case of Disaster Recovery} 1. Do **one** of these: * Revert to a Gaia Snapshot - restores the Check Point version with all the setup details, including type (management/gateway) and installation of hotfixes. * Restore from a Gaia Backup - restores latest system configuration with all recent network and security configuration. 2. Compare the output of Gaia Clish command "*show configuration*" to the saved configuration to verify that Gaia OS configuration was restored properly. 3. If this is a Security Gateway / StandAlone, install policy on this machine. ### 7. Backup Tools {#Related backup tools} |----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Tool | Description | | `migrate_server` | Applies to R80.20 and higher versions. * Refer to the *Command Line Interface (CLI) Reference Guide* for your version \> Chapter "Security Management Server Commands" \> Section "migrate_server". * Refer to the *Command Line Interface (CLI) Reference Guide* for your version \> Chapter "Multi-Domain Security Management Commands" \> Section "migrate_server". | | `migrate export` | Applies to R80.10 and lower versions. * The *migrate* tool is located in the *$FWDIR/bin/upgrade_tools/* directory. * This command backs up all Security Management configuration, independent of hardware, OS or Check Point version. * The output file does not include OS information. * For built-in help, run: `[Expert@HostName:0]# $FWDIR/bin/upgrade_tools/migrate --help` * Refer to the *Command Line Interface (CLI) Reference Guide* for your version \> Chapter "Multi-Domain Security Management Commands" \> Section "mds_backup". | | `eva_db_backup.csh` `evs_backup` | * These tools are used to back up SmartEvent / SmartReporter Server R77.30 and lower. * For details, refer to [sk102452](https://support.checkpoint.com/results/sk/sk102452). | | `mds_backup` | * This tool is used to perform advanced backup of Multi-Domain Security Management Server. * Refer to the *Command Line Interface (CLI) Reference Guide* for your version \> Chapter "Multi-Domain Security Management Commands" \> Section "mds_backup". | ### 8. Comparison of Backup Methods {#Comparison of backup methods} Enter the string to filter this table: |----------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|-------------------------|---------------------------------------------------------------------------------------------------| | | Snapshot Management | System Backup | "show configuration" | "upgrade_export" / "migrate export" | | How much time does it take? | 30 - 60 minutes | 5 - 30 minutes | Few seconds | Depends on configuration | | Size of output file on Security Gateway | 5-100 GB | Depends on configuration | Few KB | N/A | | Size of output file on Management Server | 5-100 GB | 5-100 GB | Few KB | Depends on configuration | | Does it back up Gaia OS configuration? | Yes | Yes | Yes | No | | Does it back up Products configuration? | Yes | Yes | No | Yes | | Does it back up Hotfixes? | Yes | No (does not apply to "`mds_backup`") | No | No | | Does it back up Check Point logs? | No | No | No | Not by default. Use the flag "*-l* " in the syntax to back up the SmartView Tracker logs as well. | | Does it support automatic scheduling? | **R81 and higher** - Yes **R80.40 and lower** - No | Yes | No | No | | Can you restore from different version? | Yes **Note:** Snapshots cannot be restored from a version which includes different partitioning system (e.g. GPT) or default filesystem (e.g. XFS). For example, you cannot restore a snapshot from the R77.30 version on an R80.30 3.10 version. | No | With manual adjustments | Upgrade is performed when importing to a newer version | | Does it require to close SmartConsole GUI clients? | No | **R81 and higher** - No **R80.40** - No (only from R80.40 Jumbo Hotfix Accumulator Take 53) **R80.30** - No (only from R80.30 Jumbo Hotfix Accumulator Take 215) **R80.20** - Yes **R80.10** - No (only from R80.10 Jumbo Hotfix Accumulator Take 278) **R80 and lower** - Yes | No | No | | Does it require to stop Check Point services? | No | No | No | No | | Does it require reboot? | No | No | No | No | {#Unique_IDTable} ### 9. Related Documentation {#Related documentation} * **Gaia Administration Guide** for your version: * Chapter "Maintenance" \> Section "Snapshot Management" * Chapter "Maintenance" \> Section "System Backup" * **Command Line Interface (CLI) Reference Guide** for your version: * Chapter "Security Management Server Commands" \> Section "migrate_server" * Chapter "Multi-Domain Security Management Commands" \> Section "mds_backup" * Chapter "Multi-Domain Security Management Commands" \> Section "mds_restore" ### 10. Related solutions {#Related solutions} * [sk102234 - Backing up Gaia system level configuration](https://support.checkpoint.com/results/sk/sk102234) * [sk91400 - System Backup and Restore feature in Gaia](https://support.checkpoint.com/results/sk/sk91400) * [sk98068 - Gaia Limitations after Snapshot Recovery](https://support.checkpoint.com/results/sk/sk98068) * [sk92308 - Gaia OS Backup and Gaia OS Restore operations are not supported in Expert mode](https://support.checkpoint.com/results/sk/sk92308) * [sk33329 - How to exclude or include files in the Backup on Gaia OS](https://support.checkpoint.com/results/sk/sk33329) * [sk98153 - How to take a snapshot of Endpoint Security Management Server database on Gaia OS](https://support.checkpoint.com/results/sk/sk98153) * [sk100395 - How to backup and restore VSX gateway](https://support.checkpoint.com/results/sk/sk100395) --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content