Envision: Appliance Disaster Recovery

All Information belong to knowledge.rsasecurity.com

D | Title

a36773 | Envision: Appliance Disaster Recovery

Goal

Which envision files need to be backed up?

Fact

RSA enVision

Backup

Disaster Recovery

Fix

The ISO to reimage the appliance

This is available from our FTP server;

ftp://ftp.network-intelligence.com/techsupport/Repository/

Not all images will run on all hardware, some also require BIOS upgrades. Please check with Support if necessary before using these images.

The Envision Software

Can be downloaded from Version Upgrades tab on SCOL at the following linkhttps://knowledge.rsasecurity.com/scolcms/sets.aspx?product=enVision&_v=upgrades(requires valid support contract and serial number).

Configuration for DR

The following directories and subfolders need to be backed up to allow recovery of the NIC DB, data and settings. This includes a copy of the NIC DB backup from the previous day, the one in the parent directory is locked if the NIC DB service is running. In a multi-node environment this can be expected to be on the DSrv
%_enVision%\database\dbbkup

If you have custom reports there is the following directory, (ASrv)
%_enVision%\webapps\pi\pireport

The device configuration files. Event source updates are deployed to the Asrv, but include collectors for checkpoint certificates and pos files for polling services etc
%_enVision%\etc

E:\nic\<version>\<nodename>\conf

Common Storage Directory, in an LS configuration this is on the shared storage \\NAS IP Address\vol0\csd\
E:\nic\csd\config
E:\nic\csd\global
E:\nic\csd\license
E:\nic\csd\ipaddr.tab

IPDB Data

Collected data is usually under the lsnode folder, this can be verified by inspecting Manage Storage Locations

E:\nic\lsnode OR \\NASIPaddress\volX\nic\lsnode

-Regards,

Blackhattrick blog

(Googlethewebsite.blogspot.com/blackhattrick.blogspot.com)