XG Backup Password Verification

Question

Hi, 
 I wonder if anyone knows the encryption algorithm used for Sophos XG Backup files. 
 Or better, if Sophos provides a way to verify the backup files without restoring it. 
 Because restoring the backup files will require downtime, which no one likes, and verifying the backup files on frequent basis is a requirements of the operational team. 
 Any idea / hint / lead would be appreciated. 
 Regards,

Antonio Cienfuegos S · Accepted Answer

Run this command in a Linux box or Windows WSL: 
 openssl enc -d -aes-256-cbc -in nameofbackupfile -out backup.xg.tgz -md md5 -pass pass:passwordforthebackup 
 Then, the TAR file (backup.xg.tgz) needs to be extracted. 
 
 INFO: While you can take a look at the backup to know how some things work, its totally NOT recommended to edit the dumpdb file and then load it again in a firewall.

XG Backup Password Verification

Top Replies