We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Back Up and Restore Your Systems

  • Last updated on

To back up and restore your system, you must create a Portable Archive (PAR) file. A Barracuda NextGen F-Series Firewall running firmware 6.0.1 or higher can also create encrypted PCA files to store the system configuration.

File TypePAR FileCommentRestore Configuration via
PARuncompressed, unencrypted archive fileThis is the default option.NextGen Admin, /opt/phion/update/, USB Stick when using Barracuda F-Series Install
PGZcompressed, unencrypted archive fileCan only be created via NextGen Admin.NextGen Admin, /opt/phion/update
PCAencrypted archive fileNextGen Firewall F-Series and NextGen Control Center version 6.0.1 or higher.NextGen Admin. If the password is set to the serial number of the appliance, you can also restore via /opt/phion/update/ or USB stick when using F-Series Install

Stand-alone NextGen Firewall F-Series

Create a PAR or PCA file to back up and restore the configuration of a stand-alone F-Series Firewall.

Back Up the NextGen Firewall F-Series
  1. Go to CONFIGURATION > Configuration Tree.
  2. Right-click Box and select Create PAR file. The Save As window opens.
  3. Select the archive type:
    • PAR File (*.par) (default)
    • Compressed PAR File (*.pgz)
    • Encrypted PAR File (*.pca)
  4. If you selected Encrypted PAR file, the Password window opens.
  5. Click Use Serial Number, or enter the Password manually.

    PCA archives with manual passwords cannot be used to reinstall your NextGen Firewall F-Series or NextGen Control Center via F-Series Install or update the configuration via /opt/phion/update. Decrypt the archive manually for these operations. For more information, see phionar and conftool.

Restore the NextGen Firewall F-Series
  1. Go to CONFIGURATION > Configuration Tree.
  2. Right-click Box and select Restore from PAR file. Select the required PAR / PGZ / PCA file.
  3. If you are using a PCA file, enter the Password and click OK.
  4. Click Activate.
  5. Go to CONTROL > Box.
  6. In the left navigation pane, expand Operating System and click Firmware Restart. Click Yes to confirm that you want to restart the subsystem.
  7. Expand Network and click Activate new network configuration.
  8. Activate the new network configuration:
    • If you are continuing to use the same management IP address and management port, click Failsafe.
    • If the new network configuration uses a new management IP address, click Activate Now.
      For information, see How to Activate Network Changes.

PAR files can also be created from the CLI. For more information, see How to Create PAR or PCA Files on the Command Line. If the PAR file should be used for the setup process, copy the PAR file to the USB flash drive that you will use for installation. You can only copy one PAR file on the USB flash drive. You must name the file as box.par.

Barracuda NextGen Control Center

Two PAR files are needed to back up your NextGen Control Center: The box layer box.par and the archive.par containing the Control Center configuration including all managed firewalls. You cannot restore a managed firewall from the archive.par directly.

Back Up the NextGen Control Center Box Layer

To back up the NextGen Control Center, you must create a PAR file for the box layer and the archive.par for the Control Center configuration.

  1. Log into the box layer of the Control Center.
  2. Go to CONFIGURATION > Configuration Tree.
  3. Right-click Box and select Create PAR file. The Save As window opens.
  4. Select the archive type:
    • PAR File (*.par) (default)
    • Compressed PAR File (*.pgz)
    • Encrypted PAR File (*.pca)
  5. If you selected Encrypted PAR file, the Password window opens.
  6. Click Use Serial Number or enter the Password manually.

The box.par file is saved to your local hard drive.

Back Up the NextGen Control Center Configuration
  1. Log into the Control Center.
  2. Go to CONFIGURATION > Configuration Tree
  3. Right-click the Multi-Range and select Create PAR file.
  4. The Save As window opens.
  5. Select the archive type:
    • PAR File (*.par) (default)
    • Compressed PAR File (*.pgz)
    • Encrypted PAR File (*.pca)
  6. If you selected Encrypted PAR file, the Password window opens.
  7. Click Use Serial Number or enter the Password manually.

The archive.par file is saved to your local hard drive.

Restore the NextGen Control Center Box Layer

To restore the Control Center:

  1. Go to CONFIGURATION > Configuration Tree.
  2. Right-click Box and select Restore from PAR file. Select the required PAR / PGZ / PCA file.
  3. If you are using a PCA file encrypted with a manual password, enter the Password and click OK.
  4. Click Activate.
  5. Go to CONTROL > Box
  6. In the left navigation menu, expand Operating System and click Firmware Restart. Click Yes to confirm that you want to restart the subsystem.
  7. Expand Network and click Activate new network configuration.
  8. Select one of the following network configuration activation modes:
    • If you are continuing to use the same management IP address and management port, click Failsafe.
    • If the new management IP address and management port are different from the ones currently configured on the appliance, click Activate now.
      For information, see How to Activate Network Changes.
Restore the NextGen Control Center Configuration
  1. Log into the Control Center.
  2. Go to the CONFIGURATION > Configuration Tree page. If you are prompted with warning messages, click no.
  3. Right-click Multi-Range and select Restore from PAR file
  4. Select the required archive.par file.
  5. (Optional) If the license has changed, you must also import the base license of the box layer on the Control Center. For more information, see How to Manually Install the Licenses for the Control Center.

If you are restoring the configuration of a Control Center that has been reinstalled after a system crash, you must also restore the configurations of the appliances that it manages.

Managed NextGen F-Series Firewalls

To back up and restore the configuration of an F-Series Firewall that is managed by the Control Center, you must create a PAR file in the Control Center and then recover the managed firewall directly.

Back Up the Managed NextGen Firewall F-Series
  1. Log into the Control Center.
  2. Click the CONFIGURATION tab.
  3. In the Configuration Tree, navigate to the range and cluster for the NextGen Firewall F-Series.
  4. Expand Boxes, right-click the NextGen Firewall F-Series, and select Create PAR file for box.
  5. Select the archive type:
    • PAR File (*.par) (default)
    • Compressed PAR File (*.pgz)
    • Encrypted PAR File (*.pca)
  6. If you selected Encrypted PAR file, the Password window opens.
  7. If you selected Encrypted PAR file, click Use Serial Number or enter the Password manually.

  8. Save the PAR file to your local hard drive.
Restore the Managed NextGen Firewall F-Series
  1. Log into the NextGen Firewall F-Series.
  2. Go to the CONFIGURATION > Configuration Tree page.
  3. Right-click Box and select Restore from PAR file. Select the PAR or PCA file you previously created for this firewall in the Control Center.

  4. If you are using a PCA file encrypted with a manual password, enter the Password and click OK.
  5. Click OK to confirm the Emergency Override warning message.
  6. Click Activate.
  7. Go to the CONTROL > Box page.
  8. In the left navigation pane, expand Operating System and click Firmware Restart. Click Yes to confirm that you want to restart the subsystem.
  9. Expand Network and click Activate new network configuration.
  10. Select one of the following network configuration activation modes:
    • If you are continuing to use the same management IP address and management port, click Failsafe.
    • If the new management IP address and management port are different from the ones currently configured on the appliance, click Activate now.
      For information, see How to Activate Network Changes.
Last updated on