Overview
It is recommended to keep a backup of the GFI LanGuard configuration, as well as the Database and Data Folder backups. This would help to recover from data corruption or loss and can be used when moving to a new server.
This article guides you on the process of backing up GFI LanGuard.
Diagnosis
DISCLAIMER: GFI Software recommends keeping a backup of the product Configuration and Data. In case of data loss, GFI cannot recover your configuration if a backup is not available. If using backup software to backup data, it is required to stop the GFI LanGuard Attendant service before the backup starts and to start the service again once the backup is complete. Not stopping the service during a backup by third-party backup software may cause GFI LanGuard to malfunction.
The actual backup of the GFI LanGuard includes 3 separate activities:
- Backing up the Configuration - Using the Import and Export Configuration Wizard or the Impex utility.
- Backing up the Database.
- Backing up the Data directory and selected configuration files.
Solution
1. Backing up the Configuration
To export (and import later on) the GFI LanGuard configuration follow the steps described in the Importing and Exporting GFI LanGuard Settings article.
If you want to export/import only the scanning profiles and vulnerability definitions (for example, to set up an automated scanning profiles backup), it is possible to use Impex command line tool.
2. Backing up the Database
The database needs to be backed up separately from the configuration and data.
Microsoft SQL Server database
Microsoft Access database
Using Microsoft Access database instead of Microsoft SQL Server is NOT recommended, but if you are still using it, follow the steps below:
- Stop the GFI LanGuard Attendant service.
- Backup the .mdb file specified in the LanGuard database settings:
- To find out the location of the file, open the LanGuard console and go to Configuration > Database Maintenance Options > Database Backend Settings.
- By default, the location of the Microsoft Access database is:
C:\ProgramData\GFI\LanGuard 12\scanresults.mdb
- Start the GFI LanGuard Attendant service.
NOTE: It is required to stop the GFI LanGuard Attendant service before backing up the database, whether manually or using backup software. Start the service again once the backup is complete. Not stopping the services during a backup may cause GFI LanGuard to malfunction.
3. Backing up the Data Folder
For maximum protection and to give GFI Support the most flexibility to help you restore your GFI LanGuard to the state it was in prior to upgrade (or data loss) please make a copy of the shared data folder and the XML file containing the Installation ID:
C:\ProgramData\GFI\LanGuard 12\
or on an XP/2003 class computer:
C:\Documents and Settings\All Users\Application Data\GFI\LanGuard 12\C:\Program Files (x86)\GFI\Languard 12 Agent\crmiini.xml
NOTE: If using backup software to backup the folders and files, it is required to stop the GFI LanGuard Attendant service before the backup starts and start the service again once the backup is complete. Not stopping the services during a backup may cause GFI LanGuard to malfunction.
Testing
As long as there were no errors during the backup operations, backups can be stored safely or used to move the GFI LanGuard to a new server. If backups are created as a part of business continuity and disaster recovery plans, make sure the archives and storage devices are periodically tested to prevent data loss due to corruption.