Security

Dear Airheads experts,

I would like to ask you about ClearPass backup and restore process in an cluster environment. I read the user-, deployment- and cluster tech note guide but none of them were useful about in this topic.

So I can make scheduled backup from all of the cluster members but I don't know which is the right way if I would like to revert the configuration to an old one. If I tried to restore the configuration on the publisher node I get the following warning.

Is it good if I restore only the publisher node? or should I check the "Restore cluster server/node entries from backup" option?

So I would like to know which is the right way to restore the configuration in a cluster?

Thank you in advance for your help!

Br.,

Zs

Just a question. Are you trying to do a restore into an existing production environment or a new environment? Restore shouldn't be used for basic config rollback.

Hi Tim,

This will be production soon, and we need to do some disaster revovery test before we go production. So I need to know what are the possibilites if we need to rollback the configuration, or we need to rebuild the publisher node or the whole system.

I do some test with standalone ClearPass and the restore is working well. But in a cluster environment there are a warning description before I start the restore process and it said this cluster node will be standalone.

So could you help me which is the right way if we would like to rollback, or rebuild a publiser node or the whole system?

Br.,

Zs

Hi Tim,

So do you have any guide, or recommendation about this topic?

Thank you!

Zs

Also looking for any TechNotes on DR Planning for ClearPass. Something that would cover restore scenarios in the event of lost Publisher/Subscriber/Configuration...

thanks in advance!

Thanks for the advice. Allow me to tell my case during this one week of new deployment.

Due to some policy evaluation error, i was thinking to avoid another occurrence, i need to backup the entire server so that i can easily restore if the error happens again. It indeed occurred 3 times last week.

So my question to you, how do we do the basic config backup like what you said ?

cppm version: 6.9.9 fips enabled

TAC case opened: 

5357546519

5363910443