pfSense Backup and Recovery

The pfSense backup system is built around the XML configuration file (config.xml), which contains all firewall settings - from firewall rules and VPN tunnels to user accounts and certificates. This single file is sufficient for a complete system restoration on new hardware or after a reinstallation. Regular backup creation and secure off-device storage is a mandatory element of firewall operations.

Backups contain sensitive information - passwords, certificate private keys, and VPN pre-shared keys. Securing backup storage is no less important than creating the backups themselves.

In This Section

• Backup and Recovery - manual XML export, AutoConfigBackup, disaster recovery, configuration migration between devices, and best practices