topic How to export firewall config along with pushed panorama policies using SCP in General Topics

How to export firewall config along with pushed panorama policies using SCP

Sathyac — Mon, 25 Sep 2017 12:41:16 GMT

We tried 'scp export configuration' cmd to get firewall config. But it has only local policies. Is there a way to get all (including shared) policies in config file using SCP protocol?

Thanks in Advance.

Re: How to export firewall config along with pushed panorama policies using SCP

BPry — Mon, 25 Sep 2017 13:14:50 GMT

Which file exactly did you export out of the configuration option? The running-config.xml should include everything you are looking for, are you sure you chose the proper file?

Re: How to export firewall config along with pushed panorama policies using SCP

Sathyac — Mon, 25 Sep 2017 14:37:34 GMT

Thanks for the reply . I executed below cmd

scp export configuration remote-port 22 source-ip <PA_IP> from running-config.xml to username@scp_server:/

The file has only local policies. Do I need to change any configuration on Panorama?

Re: How to export firewall config along with pushed panorama policies using SCP

davanderson — Mon, 25 Sep 2017 14:55:06 GMT

You can run your command to export the configuration on the Panorma appliance (just like you did on the FW). I would export both the Panorama and the FW.

Re: How to export firewall config along with pushed panorama policies using SCP

Sathyac — Tue, 26 Sep 2017 07:15:43 GMT

Thank you. Will try that.

Re: How to export firewall config along with pushed panorama policies using SCP

reaper — Tue, 26 Sep 2017 09:30:38 GMT

if you export the device state (scp export device-state), this will include the panorama config

panorama config is not stored in the running-config.xml

the device state will export a compressed file containing a few subfolders including the template xml and the pretrans xmls