locked
Scheduled UAG config backups RRS feed

  • Question

  • 1. Looks like there used to be a WHLBACKUP.EXE CLI utility to back up IAG. Is there a UAG equivalent that I can schedule via Task Scheduler? Or some other way to do it? All I can see to do is ROBOCOPY the contents of C:\ProgramData\Microsoft\UAG\AutoBackups to a location that gets backed up.

    2. Does the UAG config backup include the full TMG config? Or only the objects that UAG would recreate upon restore?

    Monday, March 28, 2011 2:05 AM

Answers

  • You can manually "export" the UAG config and save that XML file for import later if you had the need. This document details that process and also tells how to accomplish this via command prompt, if you wanted to run as a scheduled task:

    http://technet.microsoft.com/en-us/library/ee406185.aspx

    This is a UAG backup, so it includes the information that UAG needs to be able to have all of its settings. As you probably know, UAG configures TMG upon every activation, so once you import your settings back into UAG and then activate that configuration, TMG would again be populated with the configuration.

    I always recommend taking full snapshot images of the server if possible. Many UAG appliances (ours included of course, shameless plug here) have the ability out of the box to create and restore images of the entire machine, and you can also easily schedule these to happen automatically. I recommend doing this because with UAG, and especially if you are using DirectAccess, there are items outside of the UAG configuration that are not going to be included in that XML file. Things like your routing table and certificates would have to be manually redone if your server were to crash.

    • Marked as answer by JRV529088 Monday, March 28, 2011 4:01 PM
    Monday, March 28, 2011 12:50 PM

All replies

  • You can manually "export" the UAG config and save that XML file for import later if you had the need. This document details that process and also tells how to accomplish this via command prompt, if you wanted to run as a scheduled task:

    http://technet.microsoft.com/en-us/library/ee406185.aspx

    This is a UAG backup, so it includes the information that UAG needs to be able to have all of its settings. As you probably know, UAG configures TMG upon every activation, so once you import your settings back into UAG and then activate that configuration, TMG would again be populated with the configuration.

    I always recommend taking full snapshot images of the server if possible. Many UAG appliances (ours included of course, shameless plug here) have the ability out of the box to create and restore images of the entire machine, and you can also easily schedule these to happen automatically. I recommend doing this because with UAG, and especially if you are using DirectAccess, there are items outside of the UAG configuration that are not going to be included in that XML file. Things like your routing table and certificates would have to be manually redone if your server were to crash.

    • Marked as answer by JRV529088 Monday, March 28, 2011 4:01 PM
    Monday, March 28, 2011 12:50 PM
  • Thanks! Exactly what I needed.

    What I was getting at regarding TMG was things like System Policy or custom rules like those allowing access to WSUS. Those aren't generated automatically, so since it sounds like UAG export does not include a complete TMG export, I'll export TMG config separately.

    FWIW, I'm already backing it up conventionally, but I'm always wary of bare metal restores. Certs & routes are quick and easy, so for dedicated machines like UAG or TMG, where the config itself can be restored, my tendency is to do it that way. Fortunately, the need is pretty rare.

    Thanks again, Jordan!

    Monday, March 28, 2011 4:13 PM