Firewalla provides several methods to recover/migrate your data.
- If you are upgrading your Firewalla to a newer Firewalla unit:
- If you want to restore your data after resetting your box:
Watch a video tutorial about how to use Firewalla's data migration feature.
Replace an old box
This feature requires app version 1.52 or above and box version 1.9742 or above. It is only supported on Firewalla Gold and Purple series boxes.
The "Replace" feature only works for migration between units with the same number of ports (e.g., Gold to Gold Plus will work, but Purple to Gold will not).
If you just bought a Firewalla Gold Plus and want it to replace your old Gold, this is how you can migrate your data to your new unit.
- Ensure your app is upgraded to version 1.52 or above.
- Open the Firewalla app, tap the "+" button on the app's main screen to add a box, then select the box model.
- Power up your new box, wait for it to be discovered by the app, then scan the QR code to validate the box.
- After scanning, the app will check for any backup configurations of boxes of the same model. Then, you can choose to:
- Replace an old box: Transfer all data from another box, including monitoring mode, network settings, rules, etc.
- Set up as new: Set up this box from scratch based on your network environment.
- Select Replace an old box if you'd like to install the configurations from an existing box into your new box. This includes network settings, devices (that have been online within the past 7 days), rules, and features.
- Follow the instructions to unplug all the Ethernet cables from the old box, plug them into the corresponding ports on the new box, then tap Continue.
- Firewalla will then set up everything automatically. After setup, your new box will run just like the previous one.
Data Not Restored
Please note, as of app version 1.52 and box version 1.9742, the following data will not be restored or migrated:
- OpenVPN Server and Client configurations
- Paired phones (all other devices will need to pair with the new box again to manage it)
- DDNS domain name (a new DDNS will be generated for the new box, and all VPN clients will need to update their profile to use the new DDNS)
- Data usage history
- MSP-related configurations (you will need re-add the restored box to MSP)
Migrate data from another box
This feature is supported on all Firewalla boxes.
You can migrate data from another box if you bought a new Firewalla box and want to use it to replace the old box or if you'd like to copy over all the rules and features applied to your devices without manually creating them again.
After a Firewalla box is set up and installed, you can migrate data from another box. This data includes:
- Devices (online devices only when migrating to Firewalla Red and Blue)
- Device Groups
- IP Reservation
- Port Forwardings and DMZ
- Rules
- Target Lists
- Alarm Settings
- Feature Settings
Data Not Restored
Other data, such as VPN settings, routes, network flows and alarms, will not be migrated. We are actively working to improve our data migration capabilities.
- Ensure your new Firewalla box is running and paired with the Firewalla app. Your old box doesn't need to be live for migration.
- Open the Firewalla app and click the new Firewalla Box icon.
- Tap Settings -> Advanced -> Migrate from Other Box.
- Select the box you want to migrate from and select what kind of data to migrate, then tap "Migrate" to continue. Your new box's existing data will be kept, and migrated data will be appended. After the migration is completed, the data will be reloaded.
Restore from backup
This feature requires app version 1.52 or above and box version 1.9742 or above. It is only supported on all Firewalla Gold and Purple series boxes.
If a Firewalla box has been reset, and you'd like to set it up in the same network environment and restore all data from the backup data of the same box, you can choose to restore data from the backup during installation.
- Ensure your app is version 1.52 or above.
- Open the Firewalla app, tap the "+" button on the app's main screen to add a box, then select the box model.
- Make sure your box is powered up, wait for it to be discovered by the app, then scan the QR code to validate the box.
- After scanning, the app will check if there are any backup configurations of the same box and give you the option to
- Restore from backup: Restore all data from the backup data of the same box.
- Set up as new: Set up this box from scratch based on your network environment.
- Select Restore from backup. The app will show a list of configurations to be restored for you to confirm. Tap Continue.
- Firewalla will then set up everything automatically. After setting up, your new box will run just like the previous one.
Not Restored
Please note, as of app version 1.52 and box version 1.9742, the following data will not be restored or migrated:
- OpenVPN Server and Client configurations
- Paired phones (all other devices will need to pair with the new box again to manage it)
- DDNS domain name(a new DDNS will be generated for the new box, and all VPN clients will need to update their profile to use the new DDNS)
- Data usage history
- MSP-related configurations (you will need re-add the restored box to MSP)
Comments
24 comments
This isn't great. I just upgraded my Firewalla to Gold (from Blue, prior to that from Red when there was no migration feature) and it was helpful but Red -> Blue I had maybe 12 devices. Now I have over 40+ devices and when I did the migration from my Blue to Gold (first of all there were two options, one was my old box name and another my old box name datestamped 20days ago ... of which I did the non-date stamped and it was my settings on the day I installed Firewalla Blue 2 years ago, so I did it again with the date stamp) ...
The migration brought over maybe a dozen of my device names? It seemed to only recognize devices that at that very second were connected to the network and tried to apply names to it. Anything that is idle/offline that joins later to the network is completely unrecognized (as in the migration doesn't store old device name data, just applies it then and there and disappears?)
And so if the device name didn't come over, the rules didn't apply (like porn and family filtering for my kids devices. They're all offline so they didn't get applied to the rules).
So if you want to migrate your old box to a new one -- you have to go run around and turn on every device you have I think is the answer. Still a huge improvement to nothing when I did this 2 years ago but my only hesitation of upgrading (other than having 1GB internet and using a Blue) is the amount of manual resetting I have to do... Still appreciate this and by far one of the best low-hassle security and high-quality devices I've ever received.
I currently have the Blue active and running. I just got the Gold today. In order to migrate from Blue to Gold, in addition to the steps above, after installation should I then unpair the Blue from the network so I will just have the Gold running? Before this, should I have the Blue still connected while I setup the Gold on my network?
Well that went horrible. Probably these instructions work if you are in simple mode but as I was in dhcp mode I was down for nearly an hour. Adding insult to injury the data copy process did not copy the overlay network range so my dhcp reservations all did not work until updating the overlay network value.
Update from below: I stand corrected on a couple items. There must've been a caching issue where pieces of the migration weren't showing up yet, even after reboot. Looks like the devices were transferred over, along with Rules and Smart Queue Queue Rules, and features I had turned on. However, the interface (there's only one LAN on the Purple) didn't copy over, meaning the 3 networks on that interface and the VLAN information weren't copied. That by itself wouldn't be a huge issue, but that means all of the DHCP reservations in those networks were never transferred either. And that's a PITA.
I'm not sure what to make of this. I migrated my Purple configuration into my new Gold. I can't tell what happened with this migration. It didn't copy over my interfaces, nor my assigned networks nor the DHCP ranges, let alone the reservations. It didn't copy over my VLANs. It sure took a long time to copy over pretty much nothing I needed. I don't get it. Is there a log somewhere about what occurred in this migration?? From the looks of things, I'm going to have to manually add almost everything I needed, which is going to suck.
@Jefe,
Thanks for the feedback! Agree with you that the DHCP reservation issue is a pain.
Gold and Purple are different products with different ports, so the network can't be directly migrated over (yet). Migrating DHCP reservations issue may be a bug.
I'll have the team take a deep look at your issue, and get back to you.
Are you using iOS or Android?
My one wish for Firewalla is for them to create a backup of the configurations. So when you change things and see things are not working or there was a setup you did and it is not undoing it for whatever reason and you want to revert back to what you had previously you will be able to do so.
The other is for Firewalla to set up a web interface so you are not forced to use your phone with blue tooth to setup your Firewalla.
Honestly I like Firewalla, but I dont think I would of purchased it if I knew these two features were not available before I purchased it. These two features are like a no Brainer features that should of been included from the beginning.... A little disappointed with this from Firewalla. Please Firewalla try to add these features.
Do the networks and VLAN segments get migrated also? I'm migrating from Gold to Gold+
@AG, Yes. Use app 1.52 (now in beta), select "Replace Old Box" during setup.
@Support Team, I used app 1.52 (and put the box into beta too) - the Replace Old Box function worked flawlessly. And, it took less than 10 whole minutes. Well done!
Do I need to reset the old device to remove it from my app?
If just to remove it from app, you can just "unpair". Long hold the old box icon in first screen and select unpair. All data on old box will still be there.
If you want to use the old one elsewhere, then better reset it. The old box has to be online to get reset.
When "replacing an old box" to move everything from my FWG to my new FWG+ will the docker containers migrate?
So DHCP reservations are now part of that "Migrate from other box" feature? What about from a Purple to a Gold Plus? Or is there a problem with interfaces not matching up (saw something about this in a previous comment but they used VLAN's and multiple subnets, I don't.)
Also, what about the 3rd octet. My Firewalla purple has my home network as 192.168.76.1/24 which is what I set it to; but after I did that migration on the Gold Plus, I noticed it set the subnet for the LAN interface to 192.168.16.1/24, so the subnet is different... I can manually change it to 192.168.74.1/24 but I'm worried it'll interfere with the DHCP reservations that (hopefully) got migrated over?
@glitch, do you have all of your LAN bridged together? is it on port 1 or port 2/or 3?
@Glitch
As long as the subnet is the same, you should be able to migrate DHCP reservation from one to another. It can be any model to any model.
Short answer for "Should I set the LAN interface on the Gold Plus to 192.168.74.1/24 first and then do the migration again? " is YES.
Because the app doesn't support quick setup for migration from Purple to Gold Plus, that's why the subnet on Gold Plus is created with a random one. You can manually change it back to 76.1/24 after initial setup and then migrate using Settings -> Advanced -> Migrate from Old box.
In the future, we'll support migrating from Purple to Gold/Gold Plus with network quick setup, so that all the network and DHCP reservation will be carrier over automatically.
So according to the above, under replace old box, "This feature requires app version 1.52 and box version 1.9742 or above."
But, in the latest release notes, (Box 1.975/App 1.52), section 6 says
"Before box version 1.975, if you want to migrate your data and configurations from one box to another, Firewalla requires you to manually migrate data after the initial setup. With this new release, a complete version of box restoration and migration is supported, more data can be migrated during the initial setup, including the network configurations, routes, data usage, etc."
Do I need to join the beta to do the migration? Or will it work with version 1.9742?
Looking to migrate Rules, Devices, Groups, LACG and Reservations.
Could we get an option to manage Firewalla backups from the app, allowing us to save more than a different backup with different settings, restore from selected backup, delete and rename backup ?
Hi, I migrated from the latest release data of the app and restored back up after installing the image as recommended, ended up with two Firewalla gold boxes, one with 63 device and the other one with 51. I have two phone/tablet devices the trolleys, and if I clear the cache, the 63, Eitan Firewalla box, turns into zero devices. the problem is But some of these extra items are online devices that should be there in the other hand. The 51 has several that are not on the 63 so they’re not even overlapping. Any idea how I can resolve this? Both connect to the The box, however, the one that doesn’t keep the cash does not allow me to open up for help and support and has a different time of back up several hours before I perform the restoration. The more “Rich “version seems to have been the more recent one, with the same hour, that I reconfigured with the new image. Would really appreciate thoughts of how to Move forward with this thank you and advance
One more thing I’m noticing now is that when I Switch off Bader on the More “rich” version, No longer syncs with Firewalla, and indicate it was backed up and restored at almost the same time earlier today, perhaps when I switched the beta program on. It must’ve created an extra file under the beta version, It’s also taken away from the version that does Remains operational after clearing cache, i.e. with devices, But is missing devices that are actually receiving Internet connection. Saw somewhere under the hood. Not sure what to do about this.
After you restore, the old ICON is pretty much a repository of old configuration. What you need is look at the 'new' installed icon. Since some devices may need time to discover, you may find devices slowly coming back to your network. (this is the reason 51, less than 63)
Sorry, I do not understand what bader is ... or the rich version.
I'm planning to get a Gold+ to run the Unifi controller on it, but I want to keep my purple as backup in case I have a hardware failure. What is the best approach? Replace old box and keeping my purple in the app?
Since Purple and Gold may be configured differently (# ports are different), you are best just configure purple and leave the purple on your app. When need it, just put it back. (some what like a cold standby).
Is it possible to apply a configuration to multiple firewalla devices? We want to help support field users by having rules and settings applied by default. I am not sure from the guidance here if by "migrating" it can remain active on 2 devices or if the first device will need re-configured manually?
@Rik, you need the MSP interface https://firewalla.net to apply the same rules to multiple devices.
@firewalla thanks for the quick reply. We weren't aware of the MSP option, but it seems like what we are looking for. This said, we are a non-profit that provides techincal help for local entities in Africa / East Asia and other places, and they often don't have a budget to even buy a firewalla and may likely not be able to support a subscription model with their limited resources. We will need to look into obtaining funding, but ours is typically our time and effort that we donate, not $$.
Hi Firewalla ,
somewhere I read that you said the active or current configuration was stored "in" the app.
IF that is true then there is a 3rd party iOS app named iMazing that allows me to save ( backup) an app from my iPhone to my computer ( when the iPhone is cabled to that Mac ). And to reinstall that saved app from within their iMazing app. They have this functionality in case someone needs an older version of an app or IF an app is no longer available on the App Store.
It sounds to me that this would/could/might work to save the firewalla app onto a computer and then allow a person to download another copy of the firewalla app from the App Store onto their iPhone, and then try setting up a reset Firewalla box ( a Purple SE in my case) using that new installed Firewalla app. And IF things did not go well when trying new configurations on the Firewalla box, then they could sort of clean off, reset etc. install that prior firewalla app version using iMazing and restore the prior configuration from "within" that "older" firewalla app copy, using this process ... which hopefully would restore the firewalla box to it's previous state.
Of course IF a lot of the configuration data is stored in the cloud, then who knows what might happen....
What say ya Firewalla ????
Please sign in to leave a comment.