topic Devices managed through Panorama - Unable to export entire device config in General Topics

Devices managed through Panorama - Unable to export entire device config

Schneur_Feldman — Thu, 06 Oct 2022 17:25:49 GMT

Hi,

When I have a firewall managed through Panorama, I am unable to figure out a way to export the devices complete config file in xml.

I have tried Export Panorama and devices config bundle but I only get a few basic settings in the XML. No policies, or Interface settings.

Even when I log into a PA manually and export the config I only get a few basic settings and not all the settings on the firewall.

Is there anyway to export the entire firewall config for a device managed by Panorama ?

Re: Devices managed through Panorama - Unable to export entire device config

PavelK — Thu, 06 Oct 2022 22:02:35 GMT

Hello @Schneur_Feldman

thanks for the post!

You can get configuration of Panorama managed Firewall from: Panorama > Managed Devices > Summary, then navigate to far right to option: "Backups". After you click on Manage, you will get a new window where you get all configurations after each Firewall commit.

Kind Regards

Pavel

Re: Devices managed through Panorama - Unable to export entire device config

Schneur_Feldman — Fri, 07 Oct 2022 15:16:12 GMT

I checked in the backups but that is still not the entire config. Missing interfaces/Zones/policy's

Re: Devices managed through Panorama - Unable to export entire device config

S.Cantwell — Fri, 07 Oct 2022 17:06:30 GMT

Can you confirm that there ENTIRE FW was programmed by Device Groups and Templates and pushed using FORCE TEMPLATE VALUES? It is quite possible that the FW is partially local and Panorama configured.
Let us know.

Re: Devices managed through Panorama - Unable to export entire device config

Schneur_Feldman — Wed, 12 Oct 2022 16:03:49 GMT

The entire FW is managed by Panorama. This is happening with multiple clients and multiple Panorama deployments. Not just one client or deployment.