How do I back up and restore the TRITON infrastructure?

Topic 50211 | Backup and Restore | Web, Data, and Email Security Solutions | 11-Mar-2014


Applies to:	Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.6.x, 7.7.x, and 7.8.x Data Security, v7.6.x, 7.7.x, and 7.8.x Email Security Gateway and Email Security Gateway Anywhere, v7.6.x, 7.7.x, and 7.8.x

The TRITON infrastructure backup process saves:

Global configuration and infrastructure information, including administrator and appliance data, stored in the TRITON Settings Database.

Certificate files required for the TRITON browser components.

When you either initiate an immediate backup (see Running immediate TRITON infrastructure backups) or define a backup schedule (see Scheduling TRITON infrastructure backups), backup files are stored in the C:\EIPBackup directory by default. To change the backup location, see Changing backup settings.

The backup process checks all Websense components on the machine, collects the data eligible for backup, and creates a new folder in the EIPBackup directory with the format:

mm-dd-yyyy-hh-mm-ss-PP

This format represents the date and time of the backup (05-10-2011-10-45-30-PM, for example).


	Important Make sure that all administrators log off of the TRITON Unified Security Center before you back up or restore your configuration.

Scheduling TRITON infrastructure backups

When you installed the TRITON Unified Security Center, a scheduled task for backups was created. By default this task is disabled.

Notify Websense administrators of the backup schedule, so that they can be sure to log off of the TRITON Unified Security Center during the backup process.

Although backups do not interfere with system operation, as a best practice, schedule backups when the system isn't under significant load.

To schedule backups on Windows Server 2012:

On the TRITON Management Server, open Administrative Tools and select Task Scheduler.

In the Task Scheduler window, select Task Scheduler Library.

Right-click the Triton Backup task and select Enable.

Right-click Triton Backup again and select Properties, then select the Triggers tab.

Click Edit, and edit the schedule as required. By default, the task is scheduled to run weekly on Saturdays at midnight.

Click OK twice.

If requested, enter your administrator password for the TRITON Management Server machine to confirm the changes to the task.

To schedule backups on Windows Server 2008 or 2008 R2:

On the TRITON Management Server, go to Start > Administrative Tools > Task Scheduler.

In the Task Scheduler window, select Task Scheduler Library.

Right-click the Triton Backup task and select Enable.

Right-click Triton Backup again and select Properties, then select the Triggers tab.

Click Edit, and edit the schedule as required. By default, the task is scheduled to run weekly on Saturdays at midnight.

Click OK twice.

If requested, enter your administrator password for the TRITON Management Server machine to confirm the changes to the task.

To schedule backups on Windows Server 2003:

Open Windows Control Panel on the TRITON Management Server and select Scheduled Tasks.

In the Scheduled Tasks window, double-click the Triton Backup task, then select the Schedule tab.

Edit the schedule as required.

On the General tab or Task tab (depending on your operating system), select the Enabled check box.

Click OK.

Running immediate TRITON infrastructure backups

Before running a manual backup, make sure that all administrators are logged out of the TRITON Unified Security Center.

To launch an immediate backup:

On the TRITON Management Server, go to Start > Administrative Tools > Task Scheduler.

In the Task Scheduler window, select Task Scheduler Library.


	Note If you are using Windows Server 2003, open Windows control panel on the TRITON Management Server and select Scheduled Tasks.

If the Triton Backup task is disabled, right-click the task and select Enable.

Right-click the Triton Backup task and select Run.

Restoring TRITON infrastructure backup data

You can activate the restore operation from the TRITON Infrastructure "Modify" wizard. Make sure that all administrators are logged off of the TRITON Unified Security Center.

Before starting the restore process, it is recommended that you stop the TRITON Unified Security Center service. If you are running a Websense Web Security solution, see Important tips for backing up or restoring both Web Security and the TRITON console.

To restore TRITON infrastructure data:

On the TRITON Management Server, go to Start > Administrative Tools > Services.

Right-click the Websense TRITON Unified Security Center service and select Stop. (You may also need to stop Web Security services. See the article linked above.)

Open the Windows control panel and select Programs > Programs and Features, then select Websense TRITON Infrastructure.

Click Uninstall/Change.

When asked if you want to modify, repair, or remove the TRITON Infrastructure, select Modify.

Click Next until you get to the Restore Data from Backup screen.

Mark the Use backup data box and click the Browse button to locate the backup folder.

Click Next until you begin the restore process.

Click Finish to complete the restore wizard.

10.

Go back to the Services window and click Refresh. If the Websense TRITON Unified Security Center service (or any other service that you stopped manually) has not restarted, right-click it and select Start.

Once the restore process is complete, a file named DataRestore.log is created in the date-stamped backup folder that was used for the restore.

Changing backup settings

When you run your first backup, an EIPBackup directory is created to contain the date-stamped folders for each set of backup files. By default this directory is created in C:\. You can change this location, and also define how many old backups are kept in the backup directory.

To change the settings for the backup files:

On the TRITON Management Server, go to the directory where you installed TRITON Unified Security Center (by default C:\Program Files (X86)\Websense for Windows Server 2008, or C:\Program Files\Websense for Windows Server 2003), and access the EIP Infra directory.

Open EIPBackup.xml in a text editor such as Notepad.

This file contains the following parameters:


Parameter	Description
NUM_OF_COPIES	The number of old backups to store in the backup directory. Defaults to 5.
PATH	The location of the EIPBackup directory. Defaults to C:\.
DOMAIN	Only required if the <PATH> parameter is set to access a remote machine and you need to supply credentials in the form domain\user to write to the location. Leave this field blank if you have defined a path on the local machine, or if you have entered credentials in <USER_NAME>.
USER_NAME	Only required if the <PATH> parameter is set to access a remote machine and you need to supply a user name to write to the location. Leave this field blank if you have defined a path on the local machine, or if you have entered credentials in <DOMAIN>.
PASSWORD	Only required if the <PATH> parameter is set to access a remote machine and you have entered credentials in either <DOMAIN> or <USER_NAME>. Passwords are stored as plain text.

Edit the <NUM_OF_COPIES> parameter to specify the number of old backups that should be kept. Once this number is reached, the oldest backup is deleted when the next backup is run.

Edit the <PATH> parameter to define the location of the backup files. The location must exist already as the backup process will not create it. For example, if you set the parameter to a location on the TRITON Management Server machine, such as:

<PATH>D:\TRITON\Backups</PATH>

the backup files will be stored in D:\TRITON\Backups\EIPBackup.

You can also set the location to be another machine on your network, for example:

<PATH>\\hostname_or_IP_address\TRITON\backups</PATH>

If you do this, you may also need to enter credentials for access to the remote machine in the <USER_NAME> or <DOMAIN>, and <PASSWORD> parameters. This is not recommended as the password is stored as plain text and could therefore be accessed by other users. Instead, store the backups in a location to which you have write access without needing credentials.


	Note If you change the location of the backup files, outdated backup files will only be deleted in the new location. Old backups will not be deleted from any previous locations.

Save the file when done. Changes take effect when the next backup is run.