CacheGuard-OS
User's Guide - Version UF-2.6.1


Operating System

Registration & Subscription

The registration process enables you to obtain a free serial number (S/N) that uniquely identifies your CacheGuard appliance. For paid subscription-based services, such as a support contract, the S/N is used to purchase subscriptions. After the initial subscription period, renewal is required to continue benefiting from the purchased subscriptions.

The registration process is generally manual and should be initiated from an already installed appliance. Note that a CacheGuard appliance deployed on a public cloud is automatically registered during deployment. To begin the registration process, it is recommended to use the Web Administration GUI, as you will be prompted to connect to the CacheGuard appliance registration web portal to obtain a One-Time Password (OTP).

To start the registration process, navigate to [GENERAL] > [Main Settings] > [Registration & Subscription] in the Web Administration GUI and follow the displayed instructions. Refer to the register command in the Commands Manual for further information.

Backup & Restore

To enable rapid recovery from hardware or software failures, the configuration of a CacheGuard appliance and its essential data (antivirus signatures, URL lists, SSL certificates, etc.) can be saved on a file server and later restored on a freshly installed appliance. This is achieved by reinstalling CacheGuard-OS on a new machine.

To back up a CacheGuard appliance, the system must first create a local backup file, which can then be saved on a trusted file server. The backup creation process runs in the background; you must wait for its completion before saving the generated file.

To create and save a system backup named "cacheguard.backup" on the trusted TFTP server with the IP address 172.18.2.1, use the following commands:

Backup files can only be saved on trusted file servers. To declare a file server as trusted, use the access file command.

To restore a previously saved backup named "cacheguard.backup" from the trusted TFTP server with the IP address 172.18.2.1, use:

Note that this backup and restore method is valid only if both the freshly installed and the failed CacheGuard appliances run the same CacheGuard-OS version. If they differ, a logical restore is required. The logical restore procedure is described in the Reinstalling the OS section below and requires a copy of your appliance's logical configuration.

Patching the OS

CacheGuard Technologies periodically releases new CacheGuard-OS versions and provides OS patches to upgrade existing installations. It is strongly recommended to keep your CacheGuard appliance up to date by installing the latest available patches.

Applying OS patches carries some inherent risk. Therefore, it is strongly advised to save your logical configuration and related data/files (such as SSL certificates, custom WAF rules, and antivirus whitelists) on a trusted file server before patching. This ensures that you can reinstall your appliance from scratch using the latest version and then restore your configuration. The Reinstalling the OS section below describes this recovery process.

OS patches can be loaded from a trusted file server and applied to your CacheGuard appliance (refer to the access file command to declare a server as trusted). To load a patch file named CacheGuard-UF-64-2.1.3-patch.cgp from a trusted TFTP server with the IP address 172.18.2.1, use the following commands:

CacheGuard-OS patches can also be downloaded from official CacheGuard servers on the internet and applied directly from the appliance. Refer to the system command in the Commands Manual for details.

Caution: During the patching process, ensure that the appliance has a stable power supply. If a power failure or interruption occurs during patching, or if the process fails for any reason, the appliance may become inconsistent. In such cases, the only recovery option will be to reinstall CacheGuard-OS and manually restore your configuration.

Reinstalling the OS

Some major CacheGuard-OS releases are distributed without a corresponding patch. In such cases, you must reinstall CacheGuard-OS from scratch. To simplify recovery, you can save the appliance's logical configuration and related data/files (e.g. SSL certificates, custom WAF rules, antivirus whitelist) on a trusted file server for later restoration.

To save the logical configuration in a file named "CG.conf" and related data in a folder named "CGFiles" on a TFTP server with the IP address 172.18.2.1, use:

To restore the configuration and related files, use: Note that there are limitations to this logical backup and restore method. The following data/files are not saved and therefore cannot be restored: However, antivirus signatures and URL lists are automatically downloaded from trusted servers during the apply operation. If you have secondary administrator users, you will need to recreate them manually.

Rebooting the Appliance

In certain circumstances, you may need to reboot your CacheGuard appliance. To reboot the appliance, use the reboot command.
Copyright (C) 2009-2026 CacheGuard Technologies - All rights reserved