Database Backup and Recovery
Backup
Database backups are for restoring your Vulnerability ProtectionDeep Security system in the event of a catastrophic failure, or for transferring your Vulnerability ProtectionDeep Security Manager to another computer.
Internal Database or Microsoft SQL Server Database
Microsoft SQL Server Database
Database backups can be carried out using the Scheduled Tasks interface. Go to the Administration > Scheduled Tasks page. Click New and select "New Scheduled Task" to display the New Scheduled Task wizard. Give a name to this task and choose "Backup" from the drop-down list. The next page will prompt you for how often you want this task carried out and when. To carry out a one-time-only backup, choose "Once Only" and enter a time (5 minutes from now, for example). The next page will prompt you for a location to store the backup files. Click through to the end of the wizard to finish. A complete backup shouldn't take more than a minute or so to complete.
A "date-named" folder will be created in the backup location you specified. If you are using the Deep Security Manager's embedded Apache Derby database (which is intended for test purposes), a folder structure will be created beneath it that maps to the folders in the Deep Security Manager's install directory. To restore this database, shut down the "Trend Micro Deep Security Manager" service (using the Services Microsoft Management Console), copy the backup folders into the corresponding folders of the install directory, and restart Deep Security Manager.
If you are using a SQL Server database, a SQL Server database backup file named [timestamp].dsmbackup will be written to the backup folder specified in the Scheduled Task. (For instructions on how to restore a SQL Server database refer to your SQL Server documentation.)
If you are using a Microsoft SQL Server database, a database backup file named [timestamp].dsmbackup will be written to the backup folder specified in the Scheduled Task. (For instructions on how to restore a database, refer to your SQL Server or SQL Server Express documentation.)
Restore
Database Only
- Stop the Vulnerability ProtectionDeep Security Manager service
- Restore the database (Must be a database from the same version number of the Manager)
- Start the Vulnerability ProtectionDeep Security Manager service
- Verify contents restored
- Update all of the computers to ensure they have the proper configuration
Both Vulnerability ProtectionDeep Security Manager and Database
- Remove any remnants of the lost/corrupted Manager and database
- Install a fresh Vulnerability ProtectionDeep Security Manager using a fresh/empty database
- Stop the Vulnerability ProtectionDeep Security Manager service
- Restore the database over the freshly installed one, must be the same database name (Must be a database from the same version number of the Manager)
- Start the Vulnerability ProtectionDeep Security Manager service
- Verify contents restored
- Update all of the computers to ensure they have the proper configuration
Export
You can export various Vulnerability ProtectionDeep Security objects in XML or CSV format:
- Events: Go to one of the Events pages and use the Advanced Search options to filter the Event data. For example, you could search for all Firewall Events for computers in the Computers > Laptops computer group that were logged within the Last Hour (the Period bar) whose Reason column Contained the word "spoofed" (the Search bar).
Press the submit button (with the right-facing arrow) to execute the "query". Then press Export to export the filtered data in CSV format. (You can export all the displayed entries or just selected/highlighted data.) (The exporting of logs in this format is primarily for integration with third-party reporting tools.) - Computer Lists: computer Lists can be exported in XML or CSV format from the Computers page. You may want to do this if you find you are managing too many computers from a single Vulnerability ProtectionDeep Security Manager and are planning to set up a second Manager to manage a collection of computers. Exporting a list of selected computers will save you the trouble of re-discovering all the computers again and arranging them into groups.
Policy, Firewall Rule, and Intrusion Prevention Rule settings will not be included. You will have to export your Firewall Rules, Intrusion Prevention Rules, Firewall Stateful Configurations, and Policies as well and then reapply them to your computers.
- Policies: Policies are exported in XML format from the Policies page.
When you export a selected Policy to XML, any child Policies the Policy may have are included in the exported package. The export package contains all the actual objects associated with the policy except: Intrusion Prevention Rules, Log Inspection Rules, Integrity Monitoring Rules, and Application Types.
- Firewall Rules: Firewall Rules can be exported to an XML or CSV file using the same searching/filtering techniques as above.
- Firewall Stateful Configurations: Firewall Stateful Configurations can be exported to an XML or CSV file using the same searching/filtering techniques as above.
- Intrusion Prevention Rules: Intrusion Prevention Rules can be exported to an XML or CSV file using the same searching/filtering techniques as above.
- Integrity Monitoring Rules: Integrity Monitoring Rules can be exported to an XML or CSV file using the same searching/filtering techniques as above.
- Log Inspection Rules: Log Inspection Rules can be exported to an XML or CSV file using the same searching/filtering techniques as above.
- Other Common Objects : All the reusable components Common Objects can be exported to an XML or CSV file the same way.
When exporting to CSV, only displayed column data is included. (Use the Columns... tool to change which data is displayed.) Grouping is ignored so the data may not be in same order as on the screen.
Importing
To import each of the individual objects into Vulnerability ProtectionDeep Security, choose "Import From File" from the drop-down list next to the New button in the toolbar of the objects' respective pages.