2Management39Backup and restoreThe administrator has the ability to take a snapshot of an SEG system at a given point in timeand restore it if necessary.The snapshot taken is known as a configuration backup. This is a backup of the entire currentSEG configuration but does not include a copy of the SEG itself.Creating a backupBackups are created in two steps:Step 1:A configuration backup is first created as a single file in local volatile SEG memory. This is donewith the CLI command:Device:/> backup ‐createThe file created will be placed in the logical SEG folder called “backup” and will have thedefault name config‐YYYYMMDD.bak, where YYYYMMDD indicates the current date.To specify a filename for the backup file, the command is:Device:/> backup ‐create <filename>Step 2:Once created, backup files are transferred to an external computer by downloading the filesfrom the security gateway using SCP (Secure Copy). As stated above, all backup files are savedin an SEG logical folder called backup and this folder needs to be specified in SCP commands.It is important to note which SEG hardware the backup file came from so that it can berestored to a processor that has the same logical interface names.SCP usage is described further in Secure copy on page 30.Note: Backups are temporarily kept in the backup folder. They are not held in permanentmemory and will disappear after system restarts.Restoring a backupRestoring a backup is also a two step process:Step 1:Use SCP to upload the backup file to the target security gateway. It is uploaded to the SEGlogical folder called backup and this must be specified in the SCP command. SCP usage isdescribed further in Secure copy on page 30.