topic Re: FMC Backup Retention in Network Security

FMC Backup Retention

jmeetze — Fri, 24 Feb 2023 13:54:16 GMT

Hello,

We have a scheduled weekly task to backup our FMC and FTD Device configs to a remote storage location and have a policy threshold set to 70% of disk. Currently, there are 13 backups listed in the FMC and 99 backups for our FTDs. Is there not a way to specify how many backups I wish to keep? I do not need 99 backups of the FTD devices. Our disk space is at 65% now and as a result, our backups are not able to complete due to the threshold.

If anyone out there knows where I can specify how many days or number of backups to keep, please share. I'd hate to have to go in and manually clean this up.

Thanks!

Re: FMC Backup Retention

balaji.bandi — Fri, 24 Feb 2023 15:20:07 GMT

Sure it comsume more space when ever you take backup.

even though you have more version of backup sometime not usefull. i keep 2 or 3 copies of version to restore to old known good config.

Again this all depends on the Policy of business and data to be retain (since this is config backup, 3 know good config is good enough, rest you can delete i guess here)

hope that help you.

Re: FMC Backup Retention

jmeetze — Fri, 24 Feb 2023 15:29:11 GMT

Hi @balaji.bandi ,

My question is more about an automated method to clean backups after so many days instead of having to manually go in and clean up backups. So for your example, let's so you only want to keep the 3 most recent backups. It seems like there would be a setting for that or a way to specify how many days of backups you wish to keep and then the FMC automatically purges or overwrites older backups with new ones. Instead, if you do not go in and manually delete the backups, eventually you will hit your space threshold.

Re: FMC Backup Retention

Marius Gunnerud — Fri, 24 Feb 2023 22:40:07 GMT

As of right now there is no option / method for limiting the number of backups to retain. So your option is to manually delete them. Another option might be to script an API to delete them (though I have not checked if this is supported in APIs on the FMC) then have a Linux machine run a Cron job on a schedule that runs the script.

Re: FMC Backup Retention

balaji.bandi — Sat, 25 Feb 2023 02:46:57 GMT

May be out-of-the-box scripting or manual delete

My case we offload backup to external folders, so based on the date and data available the script delete automatically leaving the last 3 known backup will be retained.