Creating a backup copy and restoring the program from backup

You can create a backup copy of Kaspersky Anti Targeted Attack Platform and subsequently restore the program from the backup copy.

If you are not using the distributed solution and multitenancy mode and are using a standalone Central Node server, you can create a backup copy of the data of that Central Node server.

If you are using distributed solution and multitenancy mode, you can:

1. Create a backup copy of PCN data.
2. Create a backup copy of SCN data. Restoring data from a backup copy of the SCN will change the role of the server from SCN to standalone Central Node server.

Follow the procedure for creating the backup copy of the program on the server for which you want to create a backup copy of the data.

Kaspersky Anti Targeted Attack Platform may contain user data and other confidential information. The Kaspersky Anti Targeted Attack Platform administrator must independently ensure the security of this data when creating a backup copy of the program, when replacing equipment on which the program is installed, or in other cases when it may be necessary to permanently delete data. The Kaspersky Anti Targeted Attack Platform administrator bears responsibility for access to data stored on program servers.

You can create a backup copy of the following data:

• Program databases (alerts database, tasks, policies, information about alert VIP status, white lists, notifications).
• Quarantine.
• Database of alerts generated during a rescan.
• Sandbox artifacts.
• Central Node or PCN settings:
  • If you are using a standalone Central Node server, a backup copy of Central Node settings is created.
  • If you are using the distributed solution and multitenancy mode and are managing the PCN server, a backup copy of PCN settings is created.
  • If you are using the distributed solution and multitenancy mode and are managing the SCN server, you can create a backup copy of the SCN, but restoring data from a backup copy will change the role of the server from SCN to standalone Central Node server.

You can clear the directory before creating a backup copy of the program.

Before the program is restored from a backup copy, the following is cleared on the Central Node or PCN server on which the program is being restored:

• Program databases (alerts database, tasks, policies, information about alert VIP status, white lists, notifications).
• Quarantine.
• Database of alerts generated during a rescan.
• Sandbox artifacts.
• Central Node or PCN settings.

  Contents and volume of data exported for the creation of a backup copy of the program

  Maximum data volume	Data type	Exported data	Program operation mode
  4 GB	Central Node settings Program databases on the Central Node (alerts database, tasks, policies, information about alert VIP status, white lists, notifications).	Central Node settings, if selected. Program databases, by default.	Standalone Central Node server.
  4 GB	PCN settings.	Custom	Distributed solution and multitenancy mode.
  4 GB	PCN settings.	Custom As for a standalone Central Node server.	Distributed solution and multitenancy mode.
  4 GB	Program databases on the PCN (alerts database, tasks, policies, information about alert VIP status, white lists, notifications).	Default	Distributed solution and multitenancy mode.
  300 GB	Quarantine.	Custom	All modes.
  300 GB	Sandbox artifacts.	Custom	All modes.
  300 GB	Database of alerts generated during a rescan.	Custom	All modes.
  None	Targeted Attack Analyzer database.	By default (HBase data).	All modes.
  None	Events database.	None.	All modes.

Files that are in the scan queue when the backup copy of the program is created are not exported.

In this Help section Creating a backup copy of the program from the program administrator menu Downloading a file containing a backup copy of the program from the Central Node or PCN server to the hard drive of the computer Uploading a file containing a backup copy of the program from your computer to the Central Node server Restoring the program from a backup copy through the program administrator menu Creating a backup copy of the program in Technical Support Mode Restoring the program from a backup copy in Technical Support Mode

Page top