Technical Tip: Scheduled remote configuration backup on FortiMail using FTP/SFTP
Description
This article describes how to schedule remote configuration backup on FortiMail using FTP/SFTP.
Solution
GUI configuration:
Go to Maintenance -> System -> Scheduled backup -> Choose 'Daily' or 'These Days' and choose days of the week. Choose 'At hour' and schedule a time for the backup.
Enable the checkbox for 'Remote backup' and enter FTP server details:
Go to Maintenance -> System -> Scheduled backup -> Choose 'Daily' or 'These Days' and choose days of the week. Choose 'At hour' and schedule a time for the backup.
Enable the checkbox for 'Remote backup' and enter FTP server details:
Protocol FTP
Server name/IP IP/name of the FTP server
User name FTP server user name
Password FTP server password
Remote directory FTP server directory name in which backup files to be stored.
Server name/IP IP/name of the FTP server
User name FTP server user name
Password FTP server password
Remote directory FTP server directory name in which backup files to be stored.
CLI configuration:
config system scheduled-backup
set schedule daily
set schedule-hour 16
set destination remote
set remote-host 172.26.73.18
set remote-username user1
set remote-password iStcTlqff8hDuiY
set remote-directory Backup
set remote-protocol ftp
end
set schedule daily
set schedule-hour 16
set destination remote
set remote-host 172.26.73.18
set remote-username user1
set remote-password iStcTlqff8hDuiY
set remote-directory Backup
set remote-protocol ftp
end
Verification of configuration and troubleshooting:
- Verify the configuration as described above.
- Make sure that the FTP/SFTP server is reachable (execute ping <ftp server ip>) from the FortiMail CLI.
- Verify FTP server access from FortiMail using 'execute telnet <ftp server ip>:21'. It should be possible to see the FTP server banner.
- The FTP server user account must have 'write' permissions to upload configuration files from FortiMail.
- Check if an Anti-virus or Windows Firewall running on the server is blocking FTP access.
If assistance is required, collect the following data:
- The latest FortiMail configuration file.
- Enable the following packet capture on the FortiMail and collect packets during the backup.
diagnose sniffer packet any 'host <ftp server ip>' 6 0 a