Backup over SCP

[FatalHalt]

I' m trying to figure out how to backup over SCP. I' ve enabled ' admin-scp' in config sys global, but am now trying to actually figure out how to use it. Anyone able to get me started? Thanks.

[FatalHalt · Accepted solution]

Sorry to bump this thread, but been running into some issues. 

Is it just me, or are the backups you get from SCP not the full backup of the device? I've only just noticed this now that I'm doing some analytics on the files themselves, but they aren't even close to full. On one device, a full backup from the GUI gets me a file with 40,000 lines. A scp backup using sys_config is just shy of 2,200. It doesn't have any vdoms. It's almost useless. 

Is there a different command other than sys_config (or fgt-config) to get a proper, full backup?

[Elthon_Abreu · Accepted solution]

nbctcp wrote:

Ethon,

Can you please show me the steps

nbctcp,

I've attached the script for you. You can change according to your needs.

PS.: Script only for Windows OS.

[Holy]

Reading What´s new Forti OS 5.2.2 ...

Add a command to export logs on local disk to external USB CLI changes Add a command to backup all log files to USB drive. Syntax execute backup disk alllogs usb Add a command to backup specific log file(s) to USB drive.

 Syntax

execute backup disk log usb <string> //Choose log: traffic, event, ips, virus, webfilter, spam, dlp, voip, app-ctrl, anomaly, netscan

Can someone change his Script and post it here to run an automatik USB backup? 

[FatalHalt · Accepted solution]

Sorry to bump this thread, but been running into some issues. 

Is it just me, or are the backups you get from SCP not the full backup of the device? I've only just noticed this now that I'm doing some analytics on the files themselves, but they aren't even close to full. On one device, a full backup from the GUI gets me a file with 40,000 lines. A scp backup using sys_config is just shy of 2,200. It doesn't have any vdoms. It's almost useless. 

Is there a different command other than sys_config (or fgt-config) to get a proper, full backup?

[emnoc]

The sys_config is not the full backup. 

[FatalHalt]

What is the command to do the full backup?

[emnoc]

Try fgt-config ymmv 

http://docs-legacy.fortinet.com/fos50hlp/50/index.html#page/FortiOS%205.0%20Help/basic_setup.096.53....

[Elthon_Abreu]

emnoc/FatalHalt

Yes, the command "sys_config" is a full backup !

I tested and compared both methods.

[ede_pfau]

My mustard on this:

I'm doing SCP backups for a couple of customer FGTs and it's both

- just the same as 'Backup' from the Dashboard

- NOT the full backup

The files just contain the commands to transform a factoryreset config into the running config. All default settings are left out.

And I'm not dealing with VDOMs. So if anybody knows how to elicit the config for all VDOMs on a FGT then please post.

[Elthon_Abreu]

ede_pfau,

I'm doing backups with a script Batch (DOS) running on the Windows scheduler. It's work fine for me.

Best regards.

[nbctcp]

Ethon,

Can you please show me the steps

elthon.abreu wrote:

ede_pfau,

I'm doing backups with a script Batch (DOS) running on the Windows scheduler. It's work fine for me.

Best regards.

[Elthon_Abreu · Accepted solution]

nbctcp wrote:

Ethon,

Can you please show me the steps

nbctcp,

I've attached the script for you. You can change according to your needs.

PS.: Script only for Windows OS.