topic Re: Automatic backup - Palo Alto in General Topics

Automatic backup - Palo Alto

Paulo_Aun1 — Thu, 27 Nov 2014 12:18:43 GMT

I would like to know how to perform automatic backup of Palo Alto and automatically copy every morning for a server backup.Can you help me?

best regards,

Paul Aun

gbogojevic — Thu, 27 Nov 2014 12:39:17 GMT

Hi,

You can use XML API for configuration backup. More info can be found here: How to use the XML API to backup your firewall configuration

On panorama device, there is option for scheduled config export (SCP and FTP) but for firewalls you can use XML API.

HULK — Thu, 27 Nov 2014 13:25:33 GMT

Hello Paulo_Aun,

You can achieve it through two ways.

1. Write a script on Server to pull/scp/tftp configuration from Firewall.

-------------------------------

>tftp export configuration to <tftp host>

>tftp import configuration from <tftp host>

>scp export configuration to <username@host:path >

>scp import configuration from <username@host:path >

------------------------------

2. OR configure panorama to have scheduled back up:How to Schedule Configuration Export on Panorama?

A similar discussion for your reference:Backup Configuration of a PA-200

Hope this helps.

Thanks

Paulo_Aun1 — Thu, 27 Nov 2014 15:32:46 GMT

and how do I schedule the backup? do you know ? I would like to create a routine that every day 2 am the backup is done

_slv_ — Fri, 28 Nov 2014 10:20:12 GMT

Hello

On serwer/workstation where You would like to keep backup use scheduler and connect it to your backup script

Marco Leckel create very detailed info how to connect to PA device Backup Configuration of a PA-200

I added few more command to keep backup in zip file and have a date in file name:

ren config.xml PA200config_%date:/=.%.xml

7z a -tzip "C:PA200_configs.zip" "*.xml" -mx5

del *.xml

You have to put 7z.exe in same directory as a script.

Regards

Slawek