{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
        "slug": "choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename",
        "url": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/"
        },
        "title": "Choose pfSense backup contents for the recovery task, not just the XML filename",
        "summary": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "continuity-recovery",
            "label": "Continuity & recovery",
            "alt": "Paired infrastructure paths converging on a stable recovered service.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "networks-infrastructure",
                "name": "Networks & Infrastructure",
                "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-20T18:16:07+00:00",
        "modified_at": "2026-10-20T18:34:34+00:00",
        "reviewed_on": "2026-10-20",
        "reading_minutes": 2,
        "word_count": 252,
        "potentially_affected": "This concerns the pfSense GUI backup export.",
        "dse_recommendation": "DSE recommends labeling each export with its purpose and selected options.",
        "primary_source": {
            "name": "Netgate — Making Backups in the GUI",
            "url": "https://docs.netgate.com/pfsense/en/latest/backup/configuration.html",
            "published_on": null,
            "authority": "docs.netgate.com"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.</p>\n<h2>Source facts</h2>\n<p>Netgate documents backup options for configuration areas, package data, RRD graph data, extra captive-portal and DHCP databases, and SSH host keys. Omitting package data means packages must be reinstalled and reconfigured after restore. Extra databases are volatile, while preserving SSH host keys can help clients recognize the recovered firewall.</p>\n<p>Source: <a href=\"https://docs.netgate.com/pfsense/en/latest/backup/configuration.html\">Netgate — Making Backups in the GUI</a>.</p>\n<h2>Applicability</h2>\n<p>This concerns the pfSense GUI backup export.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends labeling each export with its purpose and selected options. Keep a complete recovery export distinct from a deliberately reduced troubleshooting export. Decide whether graph history and volatile lease or portal data matter for the expected recovery, and protect the resulting file as sensitive configuration. Record which identity material must remain stable when moving to replacement hardware. Avoid treating a small successful download as proof that every operational dependency is included. Require the export operator to record the selected checkboxes alongside the recovery objective. Compare that manifest with the rehearsal target before importing anything. If a deliberately excluded database or identity matters to recovery, assign its collection method rather than silently redefining completeness.</p>\n<h2>Verification</h2>\n<p>Inspect the selected backup scope and retain a protected inventory of its expected contents. Rehearse restoration on an isolated target and confirm package settings, required service data, and SSH identity behavior. Document anything that needs a separate backup method before calling the recovery set complete.</p>\n<h2>Official reference</h2>\n<p><a href=\"https://docs.netgate.com/pfsense/en/latest/backup/configuration.html\">Netgate — Making Backups in the GUI</a>. Reviewed October 20, 2026.</p>",
        "content_text": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.\nSource facts\nNetgate documents backup options for configuration areas, package data, RRD graph data, extra captive-portal and DHCP databases, and SSH host keys. Omitting package data means packages must be reinstalled and reconfigured after restore. Extra databases are volatile, while preserving SSH host keys can help clients recognize the recovered firewall.\nSource: Netgate — Making Backups in the GUI.\nApplicability\nThis concerns the pfSense GUI backup export.\nDSE recommendation\nDSE recommends labeling each export with its purpose and selected options. Keep a complete recovery export distinct from a deliberately reduced troubleshooting export. Decide whether graph history and volatile lease or portal data matter for the expected recovery, and protect the resulting file as sensitive configuration. Record which identity material must remain stable when moving to replacement hardware. Avoid treating a small successful download as proof that every operational dependency is included. Require the export operator to record the selected checkboxes alongside the recovery objective. Compare that manifest with the rehearsal target before importing anything. If a deliberately excluded database or identity matters to recovery, assign its collection method rather than silently redefining completeness.\nVerification\nInspect the selected backup scope and retain a protected inventory of its expected contents. Rehearse restoration on an isolated target and confirm package settings, required service data, and SSH identity behavior. Document anything that needs a separate backup method before calling the recovery set complete.\nOfficial reference\nNetgate — Making Backups in the GUI. Reviewed October 20, 2026.",
        "content_markdown": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.\n\n## Source facts\n\nNetgate documents backup options for configuration areas, package data, RRD graph data, extra captive-portal and DHCP databases, and SSH host keys. Omitting package data means packages must be reinstalled and reconfigured after restore. Extra databases are volatile, while preserving SSH host keys can help clients recognize the recovered firewall.\n\nSource: [Netgate — Making Backups in the GUI](https://docs.netgate.com/pfsense/en/latest/backup/configuration.html).\n\n## Applicability\n\nThis concerns the pfSense GUI backup export.\n\n## DSE recommendation\n\nDSE recommends labeling each export with its purpose and selected options. Keep a complete recovery export distinct from a deliberately reduced troubleshooting export. Decide whether graph history and volatile lease or portal data matter for the expected recovery, and protect the resulting file as sensitive configuration. Record which identity material must remain stable when moving to replacement hardware. Avoid treating a small successful download as proof that every operational dependency is included. Require the export operator to record the selected checkboxes alongside the recovery objective. Compare that manifest with the rehearsal target before importing anything. If a deliberately excluded database or identity matters to recovery, assign its collection method rather than silently redefining completeness.\n\n## Verification\n\nInspect the selected backup scope and retain a protected inventory of its expected contents. Rehearse restoration on an isolated target and confirm package settings, required service data, and SSH identity behavior. Document anything that needs a separate backup method before calling the recovery set complete.\n\n## Official reference\n\n[Netgate — Making Backups in the GUI](https://docs.netgate.com/pfsense/en/latest/backup/configuration.html). Reviewed October 20, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
                "url": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-20"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Cybersecurity",
                        "item": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 3,
                        "name": "Choose pfSense backup contents for the recovery task, not just the XML filename",
                        "item": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/#article",
                "identifier": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
                "url": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/",
                "headline": "Choose pfSense backup contents for the recovery task, not just the XML filename",
                "description": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.",
                "abstract": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.",
                "articleBody": "Package settings, graph history, volatile databases, and SSH host identity are separate backup choices.\nSource facts\nNetgate documents backup options for configuration areas, package data, RRD graph data, extra captive-portal and DHCP databases, and SSH host keys. Omitting package data means packages must be reinstalled and reconfigured after restore. Extra databases are volatile, while preserving SSH host keys can help clients recognize the recovered firewall.\nSource: Netgate — Making Backups in the GUI.\nApplicability\nThis concerns the pfSense GUI backup export.\nDSE recommendation\nDSE recommends labeling each export with its purpose and selected options. Keep a complete recovery export distinct from a deliberately reduced troubleshooting export. Decide whether graph history and volatile lease or portal data matter for the expected recovery, and protect the resulting file as sensitive configuration. Record which identity material must remain stable when moving to replacement hardware. Avoid treating a small successful download as proof that every operational dependency is included. Require the export operator to record the selected checkboxes alongside the recovery objective. Compare that manifest with the rehearsal target before importing anything. If a deliberately excluded database or identity matters to recovery, assign its collection method rather than silently redefining completeness.\nVerification\nInspect the selected backup scope and retain a protected inventory of its expected contents. Rehearse restoration on an isolated target and confirm package settings, required service data, and SSH identity behavior. Document anything that needs a separate backup method before calling the recovery set complete.\nOfficial reference\nNetgate — Making Backups in the GUI. Reviewed October 20, 2026.",
                "datePublished": "2026-10-20T18:16:07+00:00",
                "dateModified": "2026-10-20T18:34:34+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/choose-pfsense-backup-contents-for-the-recovery-task-not-just-the-xml-filename/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Choose pfSense backup contents for the recovery task, not just the XML filename"
                },
                "articleSection": [
                    "Cybersecurity",
                    "Networks & Infrastructure"
                ],
                "keywords": [
                    "Cybersecurity",
                    "Networks & Infrastructure",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Networks & Infrastructure",
                        "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
                    }
                ],
                "wordCount": 252,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Netgate — Making Backups in the GUI",
                    "url": "https://docs.netgate.com/pfsense/en/latest/backup/configuration.html"
                }
            }
        ]
    }
}