PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config

CarloTaddei — Sat, 05 Oct 2019 16:56:10 GMT

Hi,

we are managing a pool of PA Firewalls using Panorama.

Some of the settings are pushed to the managed devices via Templates (i.e. several additional users, shared objects, etc.).

Device Config is saved on a regular basis on the device itself as well as on the Panorama.

However what I do not understand is that, if I save and export the device config locally on the unit as well as on Panorama, I do not seem to get a full device config -> i.e. only a fraction of the users are listed.

Am I missing something ?

Is there a way to save the entire current running config of the firewall (for disaster recovery ?)

Re: PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config

reaper — Mon, 07 Oct 2019 11:52:20 GMT

The local firewall saves it's local config while panorama saves the panorama config+templates

This so you can quickly stage a local replacement device with the local config, whatever the location is, and then push the shared config/templates onto it

For a quick one-time (non-automated, but manual intervention) config copy, you can export and import the device state (rather than the config file) which is the device's 'running' situation

topic PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config in General Topics

PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config

Re: PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config