topic Re: Backup Configuration of a PA-200 in General Topics

Backup Configuration of a PA-200

bdunbar — Mon, 10 Nov 2014 18:42:05 GMT

We had a near miss on our PA-200. Got it recovered (thanks, support team!) by reseting to factory default and restoring the configuration, but it would have been a lot quicker if we'd had a current configuration to restore from, instead of having to first save, then reset, then restore.

But I want to automate the process of saving a configuration so the -next- time this won't be such a hassle.

I think I can simply script a process to login to the host via ssh and dumb the configuration to disk.

Unless there is a feature where this can automagically happen?

Re: Backup Configuration of a PA-200

ssharma — Mon, 10 Nov 2014 18:50:52 GMT

Hi bdunbar,

This option is available in panorama if you are using one to manage devices :

You can schedule it daily. If not, you will have to run script for the device and export running config daily. Hope this helps. Thank you.

Re: Backup Configuration of a PA-200

hshah — Mon, 10 Nov 2014 18:52:48 GMT

Hi Bdunbar,

You can achieve it through two ways.

1. Write a script on Server to pull/scp configuration from Firewall.

2. OR configure panorama to have scheduled back up.

How to Schedule Configuration Export on Panorama?

Regards,

Hardik Shah

Re: Backup Configuration of a PA-200

bdunbar — Mon, 10 Nov 2014 19:08:02 GMT

Thanks!

We're not quite ready to use Panorama, but if we keep buying PAN we will.

Re: Backup Configuration of a PA-200

MarcoLeckel — Tue, 11 Nov 2014 17:01:14 GMT

You can also use the XML API.

1 Generate an Admin Role with XML API access and bind this role to a User you want to use

2 Generate a KEY : https://YOURFIREWALL-IP/api/?type=keygen&user=USERNAME&password=PASSWORD (replace YOURFIREWALL-IP, USERNAME, PASSWORD with your values)

3. pull your config with wget and/or schedule the command with crontab or windows scheduler:

wget.exe --no-check-certificate “https://YOURFIREWALL-IP/api/?type=config&action=show&key=YOURKEY” --output-document=PATH-TO-YOUR/config.xml

regards

Marco

Re: Backup Configuration of a PA-200

bdunbar — Tue, 11 Nov 2014 19:26:17 GMT

Seems like a great opportunity to learn the API, thanks.

Created the user, assigned the role. the link https://my.ip.add.res/api/?type=keygen&user=obfuscate&password=obfuscate returns a 404.

"Access Error: 404 -- Not Found

Can't locate document: /api/"

APi isn't turned on?

Re: Backup Configuration of a PA-200

hshah — Tue, 11 Nov 2014 19:45:09 GMT

Hi Bdunbar,

API is turn ON by default. Its something with API string.

Regards,

Hardik Shah

Re: Backup Configuration of a PA-200

bdunbar — Tue, 11 Nov 2014 20:04:48 GMT

Duh on me: I failed to include the port address.

Thanks.