SASE Restore

[#1]

Deployed SASE Nodes can be restored if the deployed SASE NetWitness Node is in an unrecoverable state. To recover/restore a previously deployed SASE NetWitness Cloud Node, the node’s configuration must have been previously backed up in the /root/.sase/backups/ directory using the nw-create-cloud-hybrid --backup-cloud-nodes command, and the instance must be completely removed/deleted from the cloud provider project. Additionally, the node must still exist in the NetWitness Configuration (see nw-manage --l). The nw-create-cloud-hybrid script has a --restore-cloud-node option that will utilize the underlying NetWitness recovery capability and facilitate the automated restoration of a cloud based NetWitness node. The following command must be executed using the nw-create-cloud-hybrid script on the Admin Server:

nw-create-cloud-hybrid --restore-cloud-node

or

nw-create-cloud-hybrid --r

Options	Description
--uuid	UUID of the specific node (Required)
--deployment-model	Optional Name of deployment model in template defaults to pre-defined 'gcp default'
--cloud-key-path	Optional Cloud Service Account Json-based key data path GCP will default to /root/.gcp/gcp-auth-token.json

This command will recreate the previously deployed SASE based cloud instance and apply the configuration of that node based on the last backup available in the /root/.sase/backups directory.

Note: This process only restores one node based on the required --uuid parameter. The uuid for a specific node can be found using the nw-manage --l command.