McAfee Data Loss Prevention 9.2.2 Product Guide

14Disaster recovery backup and restoreHow the backup and restore process works• Network settings • Incidents• Certificates and keys • Endpoint configurationAt McAfee DLP version 9.2.2, annotations added to incidents and object details are restored.These components are not included in a configuration backup:• Capture data• RSA keys on standalone devices• Exported files, such as reportsBackup and restore considerationsDepending on the features and components you use, there are some additional considerations for thebackup and restore process.ComponentProduct and versionInstallationManaged devicesDisk spaceConsiderationA backup file must be restored to the same product and version.A backup file must be restored on a new installation. For more information oninstalling software on an existing installation, see the McAfee Data LossPrevention Installation Guide.• Backup and restore is not supported on individual managed devices.Configuration and data from the managed devices are included in theMcAfee DLP Manager backup.• If the backup file used to restore a McAfee DLP Manager system is not upto date, McAfee DLP devices might not share the configuration of theMcAfee DLP Manager to which they are registered. If that happens, theymight have to be unregistered and re‐registered, and all incidents on thedevice will be deleted.The /data folder must not go over a certain percentage of used space:• Model 4400 appliances — less than 70 percent used• Model 1650 and 3650 appliances — less than 50 percent usedThe df command shows the percentage of used disk space.Process timingIncidentsCommunicationsbetween devicesPolicy match countMcAfee DLP DiscoverCapture filtersThe backup and restore process depends on the volume of data on theappliance and the number of running and active scans. Processing time mightbe lengthy.Incidents older than 30 days will not be restored.Re‐establishing communication channels between McAfee DLP Manager andmanaged devices might be lengthy depending on network connectivity.During a restore, the match count for all policies is reset to zero.When a scan is running, manifest information generated by the scan updatesfrequently. When a backup begins, scans are paused so that manifestinformation remains consistent. After the backup completes, any pausedscans will resume running.After a restore, the devices that filters are deployed on are reset, and mustbe redeployed.284 McAfee Data Loss Prevention 9.2.2 Product Guide