This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is a Restore of XG 17.5.14 (SG210r1) into XG 17.5.14 (Software) possible?

Hi,

is a restore from a XG 17.5.14 running on a old SG 210r1 into a Software XG possible?

I have a software installation on a Dell PC (i5, 32GB, 250GB SSD, 5 NIC´s)?

I asked sophos and they don´t know.

thanks

Jürgen



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi  

    Thank you for reaching out to the Community! 

    If the target appliance satisfies the criteria required for the number of interfaces then the backup should work. Did you get any error message? 

    Check out the following KBA for more info: Sophos XG Firewall: Backup-restore compatibility check.

    Thanks,

  • Thanks,

    i checked the KBA.

    My machine has i5, 16GB Memory and 6 NIC`s

    I only get a error message that the backup can´t be restore.

    if i grep the log file i find this message.

    Backup from SG210 cannot be restored on SF01V

    Thanks

    Jürgen

  • You need the matching Interface number, not the configured.

    As SG210 has 8 Ports (+ one Management as far as i can remember), you need at least 9 Interfaces in your virtual appliance. 

    __________________________________________________________________________________________________________________

  • Thanks LuCar Toni,

    i have a Windows 10, Hyper-V Guest with 10 vNIC´s now.
    And the restore is possible.

    Let see how long Sophos Support will need to find this information.
    They still have no clue...

    But SG210 Rev. 1 has 6 interfaces.

    Is the COM Port a 7th interface?

  • Did you use the Flexi Port Module, which is optional in SG210?

    Seems like your SG210 has more interface as i expected. 

    __________________________________________________________________________________________________________________

  • While not the answer you are asking for, there's another way (not perfect and involves some work) in case the backup thing doesn't work. It involves getting a full export from the SG device and loading the individual parts of the config by hand, either with import in the GUI or by CLI. 

    Normally, this involves editing the XML file to match the new interfaces (example: Change PortA1 to Port1) but with notepad++ and search/replace, its very easy.

     

    Downsides?

    You will probably loose the FW cert and thus, all the ssl users will need to download the config again.

    Takes some time and practice, but after that, its easy.

     

    Besides that? Nothing and its very useful to learn how to use API.

  • Thanks for your help,

    my SG210r1 has no flexi Ports.