On the Management > Backup/Restore > Backup/Restore tab you can create backups, import backups, as well as restore, download, send, and delete existing backups.

Available Backups

This section is only visible if at least one backup has been created before, either by the automatic backup function or manually (see section Create Backup).

All backups are listed giving date and time of their creation, their Sophos UTM version number, the user who created it, and the comment.

You can decide whether to download, restore, delete, or send a backup.

Create Backup

Backups are not only useful to restore your system after an (unwanted) change or failure. Moreover, they can be used as templates to set up systems that should have a similar configuration so that those systems are already pre-configured in some way which can save you a lot of time. For that, you can strip certain information from a backup before it is created, e.g. hostname, certificates, etc.

To create a backup with the current system state, proceed as follows:

  1. In the Create Backup section, enter a comment (optional).

    The comment will be displayed along with the backup in the backup list.

  2. Make the following settings (optional):

    Remove unique site data: Select this option to create the backup without host-specific data. This includes hostname, system ID, SNMP data, HA data, license, shell user passwords, and anonymization passwords as well as all certificates, public and private keys, fingerprints and secrets of Email Protection, Web Protection, Client Authentication, IPsec, SSL VPN, RED, WebAdmin, Web Application Firewall, and proxies.

    Such backups are a convenient means to set up multiple similar systems. There are some things to consider though: 1) After restoring you are presented the basic system setup. 2) Only the first interface is configured, the primary IP address being the one that has been configured during installation. All other interfaces will be disabled and set to IP address

    Caution – Although most of the host-specific data is being removed, such a backup template still contains confidential information, such as user passwords. Therefore it is good practice to always encrypt it.

    Remove administrative mail addresses: Select this option to additionally remove the administrator email addresses used in various parts of Sophos UTM, e.g. postmaster addresses in Email Protection, notifications, etc. This option is especially useful for IT partners who set up Sophos UTM devices at customers' sites.

  3. Click Create Backup Now.

    The backup appears in the list of available backups.

    If a backup is created with one or both of the options selected, the backup entry contains a respective additional comment.

    Note – The HA settings are part of the hardware configurations and cannot be saved in a backup. This means that the HA settings will not be overwritten by a backup restore.

Import Backup

To import a backup, proceed as follows:

  1. Click the Folder icon and select a backup file to upload.
  2. Click Start Upload.
  3. Decrypt the backup.

    If you want to upload an encrypted backup file, you must provide the correct passphrase prior to importing the backup.

  4. Click Import Backup to import the backup.

    Note that the backup will not instantly be restored. Instead, it will be added to the Available backups list.