topic Re: Beginner questions in General Topics

Beginner questions

rparamati — Mon, 25 Mar 2013 10:00:33 GMT

i am a beginner in paloalto networks.

Can some one please help me to know the below doubts.

Cli "telnet command" option is not seen in 5.0.0 version

How can we take config backup automatically scheduled

Admin accounts are synchronized in HA active - passive

Pipe Command is not seen visible in 5.0

Thanks

Re: Beginner questions

Retired Member — Mon, 25 Mar 2013 10:05:11 GMT

Telnet is not available with 5.x

If you want an auto config backup and you do not have Panorama, only way I know is using API.

Wıth Active passive admin accounts are not syn. this is normal behaviour.

Re: Beginner questions

rparamati — Mon, 25 Mar 2013 10:29:13 GMT

In Active - Passive HA it is normal behavior that Admin accounts does not Synchronize.

But i see that the admin account from the active device are synchronized to passive along with the config.

Thanks

Re: Beginner questions

Retired Member — Mon, 25 Mar 2013 11:11:00 GMT

You mean you created an Administrator account under "Administrators" named X

and you see it on passive device ?

Re: Beginner questions

srikanth — Mon, 25 Mar 2013 16:06:10 GMT

I find it a little strange because all the documentation says stateless connections and Admin accounts and HA config will not be synced between 2 devices. But still i see the accounts get synced between Active and Passive firewall.

Any specific intention removing telnet from 5.0.x? Day to day routing telnet is something important and i feel thats a bug and not intentional.

How to take freq back up from Panorama? If i am not wrong the config files of Panorama can be taken freq backup but not device config files. I dont think device config files are backward compatible to panorama

Re: Beginner questions

Retired Member — Tue, 26 Mar 2013 00:01:24 GMT

telnet is removed because of a security purpose.

Re: Beginner questions

Retired Member — Tue, 26 Mar 2013 00:08:01 GMT

Backup from panorama ?

You have to read these documents.You have an option to schedule config backups.

Re: Beginner questions

sean.valois — Thu, 25 Jul 2013 17:33:59 GMT

Is SFTP Supported? If so, how does that get configured. I really do not want to send firewall configures across the wire cleartext if it can be avoided.

Re: Beginner questions

kprakash — Thu, 25 Jul 2013 17:41:38 GMT

SCP is supported to export the configurations

https://live.paloaltonetworks.com/docs/DOC-1092

Does this help?

BR,

Karthik

Re: Beginner questions

sean.valois — Thu, 25 Jul 2013 17:54:53 GMT

Does this work in Panorama's scheduled export?

Re: Beginner questions

knarra1 — Thu, 25 Jul 2013 18:39:26 GMT

From panorama version 5.0 , you can choose protocol SCP for schedule config export Panorama > Schedule Config Export

Re: Beginner questions

sean.valois — Thu, 25 Jul 2013 18:44:00 GMT

Thank you for the tip. Currently my Palos are on 4. and my Pano is on 4. so this will not work. We had some issues with managing the 4. PANs with a 5. Pano so we downgraded.