Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 2133 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Backup's SG to XG KB - Is this accurate?

Badrobot

https://community.sophos.com/kb/en-us/124585 

The KB from Sophos states- you can do a backup-restore from a lower firmware to an equal or higher firmware but not the other way around.

Yet I have heard you need to have the same version in order for the back to work correctly?

What’s more odd is on this same page you can download the List of Appliances for each Series and then use the web page to see what back ups are supported to what models.  According to this a backup from a SG 230 is capable of working to a XG 230 which honestly would be awesome but I just don’t see how that is possible given the changes between to the two OS’s and how the firewall backup would essentially fill in the blanks so to speak.

I only find this odd because I was told by Sophos Support on the phone and have read in multiple places that there is no way to migrate to XG from SG, but this would imply you can simply restore from a back up.

Basically the List of Appliances for each Series shows all the SG’s under SGXXP and all the XG’s under XGXXP, when you select these two you get this-

 Backup Restore From SGXXP Appliance to XGXXP Appliance is Not Supported for XG85, XG105, XG115, XG125 and XG135 but it is Supported for XG210, XG230, XG310, XG330, XG430, XG450, XG550, XG650 and XG750

 

There is also a matrix for extended interfaces and which will work and which will not depending on your port count I am assuming.

 

Maybe I am getting this all wrong but I thought I would throw it out there to understand it better, especially for recovery practices.

 

 



This thread was automatically locked due to age.
  • 0

    I'm not sure what that tool is reporting but I think it is about hardware compatibility, not software.  You can install XG on a SG230 appliance.  And then upgrade it to an XG230 appliance.

     

    However what you are really asking about is UTM->XG migration.  Yes there is a tool, I'm not sure about how much it is in "beta" versus "early access" versus "release".  I know it is available on the Partner Portal.  And in fact the tool works on the UTM backup - however I do not know the details.  I vaguely recall hearing something like it migrates only half the objects, but it migrates most of the "hard stuff".  There is absolutely a bunch of work that needs to be done post migration.

    There is even a forum for it.

    https://community.sophos.com/products/xg-firewall/f/sophos-utm-to-xg-migration

  • 0 in reply to Michael Dunn

    The KBA is only about the fact, that a customer is already running SG with SFOS and wants to migrate to a Hardware XG with SFOS.

    Pre V17.5, this was not possible. In fact, the Customer could not import the Backup from a SG with SFOS and restore it on a XG with SFOS (even in the same size). 

    https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-17-5-mr3-released

    Broader Backup/Restore Support
    Support for Migration to XG Series Hardware. Backups from XG Firewall running on SG Series devices can now be restored to XG Series devices. In addition, backups from Cyberoam CROS and SFOS backups can be restored to XG Series devices without any manual conversion.