Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=backup-restore-20mr2

Restore to 20.0 MR2 and later

20.0 MR2 and later versions introduce a wider backup and restore capability among firewall models and platforms. For example, you can restore a backup from a 6-port XG device to a 4-port XGS device. If you restore backups from 19.5 MR4 and later, the backup-restore assistant is available to customize the interface mapping when you restore to XGS, virtual, and cloud appliances.

Backups taken from 19.5 MR4 and later

You can change the firewall's default interface mapping using the backup-restore assistant.

The backup-restore assistant only appears if all the following conditions are met:

  • The backup is from any appliance (XG, SG running SFOS, XGS, virtual, or cloud) running 19.5 MR4 and later.
  • You're restoring to 20.0 MR2 and later.

  • You're restoring to XGS, virtual, and cloud appliances.

    Note

    If you're restoring to XG or SG series firewalls, the assistant doesn't appear.

Backups taken from 19.5 MR3 and earlier

The wider backup and restore capability among firewall models and platforms is also available when you restore from 19.5 MR3 and earlier to 20.0 MR2 and later. However, the firewall doesn't show the backup-restore assistant for interface mapping.

Restore failures

When a backup fails to restore, you can see error messages in the firewall to help you identify and resolve the failure. To see these errors, you must meet the following conditions:

  • The backup is from any compatible appliance running 19.5 MR4 and later. See Compatible devices for restoring backups.
  • You're restoring to 20.0 MR2 and later.
  • You're restoring to the following Sophos Firewall models: XGS 88(w), 108(w), 118(w), 128(w), and 138.

For all other restore failures, check the firewall logs for more information.

Sophos Central registration

Sophos Central registration is only retained when you restore a backup to the same firewall from which the backup was taken.

Restoring a backup to a different firewall or an HA cluster deregisters the firewalls from Sophos Central. You must register the firewalls to Sophos Central and reconfigure Sophos Central services such as Security Heartbeat and Sophos ZTNA again. See Backup-restore in HA.

Form factors and models

The firewall form factors and models are as follows:

XG Series

Desktop

Gen.1 XGS

Desktop

Gen.2 XGS

Desktop

 1US 1UL 2U

XG 86(w)

XG 106(w)

XG 115(w)

XG 125(w)

XG 135(w)

XGS 87(w)

XGS 107(w)

XGS 116(w)

XGS 126(w)

XGS 136(w)

XGS 88(w)

XGS 108(w)

XGS 118(w)

XGS 128(w)

XGS 138

XG 210

XG 230

XG 310

XG 330

XGS 2100

XGS 2300

XGS 3100

XGS 3300

XG 430

XG 450

XGS 4300

XGS 4500

XG 550

XG 650

XG 750

XGS 5500

XGS 6500

XGS 7500

XGS 8500

Compatible devices for restoring backups

You can restore backups from any SFOS version to 20.0 MR2 and later on the devices shown in this table.

Tip

Use the compatibility tool to select the firewalls you can take a backup from and restore it to. See Backup-restore compatibility check.

Backup from Restore to
Form factor Desktop 1US and 1UL 2U Virtual
Desktop 1
1US

Allowed only on:

XGS 126(w)

XGS 136(w)

XGS 128(w)

XGS 138
1UL and 2U
Virtual

  1. You can restore backups taken from XG desktop or Gen.1 XGS desktop models on Gen.2 XGS desktop models with some restrictions. See Backup and restore wireless models. ↩