Protecting your database against hardware and software failures is essential for ensuring the availability and integrity of configuration and/or forensic data. Trellix IPS provides backup functionality under the Manager → <Admin Domain Name> → Maintenance → Database Backup within the Trellix IPS Manager Configuration page, or through a standalone tool called the "Database Backup and Restore Tool" (%programfiles%\Trellix\IPS Manager\App\bin\dbadmin.bat).
Note
You can also use dbbackup.bat to back up and restore data. However, strongly encourages you to use dbadmin.bat for all your database administration tasks.
In the Manager, backups can be performed by a set schedule (Automation) or on demand (Now). The standalone tool can also perform backups, and is the only area wherein restoration of a backup can be executed.
When performing a backup, you can back up the following tables (Backup Types):
All Tables — Back up all information, including configurations, alerts, and audits. This option is not enabled by default due to disk space consideration. When backing up All Tables, use the Now action.
Tip
Saving your All Tables settings monthly is strongly recommended.
Config Tables — Back up only tabled information relating to configured tasks. This option is enabled by default to occur every Saturday night. This is set within the Schedule action.
Tip
Saving your configuration settings weekly is strongly recommended.
Audit Tables — Back up only information on user activity and alert information. Backing up this data is useful for offline analysis. This option is not enabled by default. Use the Now action.
Event Tables — Back up only information on alert, packetlog, host and Sensor performance events.
Trend Tables — Back up only information on trend patterns (daily, weekly, monthly) of alerts and Sensor performance events. The backup also includes the first-seen attack statistics.