After some changes in the firewall policy, you run into some issues. You want to test if the policy from two weeks ago has the same issue. You don't want to lose the changes from the last weeks. What is the best way to do it?
A.
In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the ‘Install specific version’ button
B.
Use the Gaia WebUI to take a backup of the Gateway. In SmartConsole under Security Policies go to the Installation History view of the Gateway, select the policy version from two weeks ago and press the ‘Install specific version’ button
C.
In SmartConsole under Manage & Settings go to Sessions –> Revisions and select the revision from two weeks ago. Run the action ‘Revert to this revision...’.
D.
Use the Gaia WebUI to take a snapshot of management. In the In SmartConsole under Manage & Settings go to Sessions -> Revisions and select the revision from two weeks ago. Run the action ‘Revert to this revision...’ Restore the management snapshot.
You need to look at the format of the question - You don't want to lose changes. If you revert in SMS it will overwrite changes that have been made since 2 weeks ago. No need to do a snapshot/backup.
You can use revisions to get out of a crisis mode, in these scenarios:
I. Connectivity/security problem after making changes to the policy and installing policy.
Solution:
In SmartConsole, go to Security Policies -> Installation History
In 'Policy Installations History', select version and click 'Install specific version'.
After a gateway is safely re-installed, you can take the time and understand the changes done on the management server that created the problem, by querying the audits and changes done in each revision.
Policy Installation History
In the Installation History you can choose a Security Gateway, a date and time when the Policy was installed, and:
See the revisions that were installed on the Security Gateway and who installed the Policy.
See the changes that were installed and who made the changes.
Revert to a specific version, and install the last "good" Policy.
https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_SecurityManagement_AdminGuide/Topics-SECMG/Policy-Installation-History.htm
in oppose to DB revisions
Reverting to a previous revision is an irreversible operation, newer revisions than the target revision are lost.
This approach allows you to install a specific version of the policy on the gateway without reverting the entire management database, thus preserving the changes made in the last weeks.
The best way to test if the policy from two weeks ago have the same issue is to install the specific version of the policy from the installation history view of the gateway. This way, you can keep the changes from the last weeks in the management server and revert back to them later if needed. You do not need to take a backup or a snapshot of the gateway or the management server for this purpose.
I don't believe the answer here is B, why..What is the point of backing up the gateway when this only holds the complied version of the policy.
I'm leaning towards C here, why...A policy has already been installed and is causing issues (There would be a revision for this), so reverting back to a policy from two weeks ago would still leave a way back to the policy currently installed.
C is not correct answer
Reverting to a previous revision is an irreversible operation, newer revisions than the target revision are lost.
Correct answer A or B
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AmandaB
3 days, 18 hours agoCalex775
2 weeks agoFMorales
2 weeks, 3 days agokrzaki
3 weeks, 3 days agokeikei1228
1 month, 2 weeks agobbend
2 months, 2 weeks agoJallic
3 months ago57ad24d
4 months agobabochnik
3 months, 2 weeks agovmg83
4 months, 1 week agopremoli
4 months, 1 week agopremoli
4 months, 1 week agoKenny4275
5 months agoZiamsu
6 months agocristip
6 months, 3 weeks agofc75833
7 months agofc75833
7 months ago