How do I restore a CS-MARS device from its Archive ?

This article provides the steps required for restoring a CS-MARS configuration (incidents, events, configuration etc) to another CS-MARS device whilst maintaining the devices original IP settings.

The following steps are based on restoring the an archive from a device which is the same model and is also running the same software version.


Ensure that your NFS server is configured to allow your CS-MARS device to mount and read the NFS share.

Time / Date

Ensure both devices are running the same time and date, using the time and date commands from the CLI.


To restore the configuration from the NFS server run the following command :

[pnadmin]$ pnrestore -m 4 -r 1 -p [NFS IP]:[NFS SHARE]
The system will be restored to its last archived state!
Do you want to proceed? (y/n) y
Start restoring the system configuration and database!
It may take a few hours if the amount of data to be restored is large.

Note: To confirm the path to the NFS share go to Admin > System Maintenance > Data Archiving.
Once the restore is complete the device will reboot.


Rick Donato

Want to become an IT Security expert?

Here is our hand-picked selection of the best courses you can find online:
Internet Security Deep Dive course
Complete Cyber Security Course – Hackers Exposed
CompTIA Security+ (SY0-601) Certification Complete course
and our recommended certification practice exams:
AlphaPrep Practice Tests - Free Trial