Question & Answer
Question
Is it possible to restore a QRadar Network Security (XGS) sensor to factory default settings without performing a full reimage of the sensor?
Answer
By default, the XGS has a snapshot file named ISNP_XXXXXXXXXXXX_unconfigured.snapshot with a comment of
Important:
Factory defaults. The XXXXXXXXXXXX section of the file name contains the base firmware version on which the snapshot was made along with the date it was created. Applying this snapshot reverts the appliance to an unconfigured state with factory defaults settings.Important:
- Reverting to factory settings while the appliance is cabled inline in the network can cause a network outage.
- Reverting to factory settings will remove the configuration from the management port. This will cause the appliance to no longer be accessible over the network. Ensure that you have physical access to the appliance for reconfiguration purposes before proceeding.
- Log in to the XGS LMI and go to Manage System Settings > System Settings > Snapshots.
- Select the ISNP_XXXXXXXXXXXX_unconfigured.snapshot file with the comment of
Factory defaultsand click Apply.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Component":"Backups and Recovery","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Product":{"code":"SSHLHV","label":"IBM Security Network Protection"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"Backups and Recovery","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"5.3;5.3.1;5.3.2;5.3.3","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
24 January 2021
UID
swg21974662