topic Re: Issue with config backup in General Topics

Issue with config backup

FarzanaMustafa — Thu, 09 Jan 2020 05:44:36 GMT

PANOS 8.1.9

When we are doing the config backup we do not see all the config is getting backed up – for example, the firewall rules, NAT and port forwarding rules are not seen in the backup – Apparently a very fraction of the configuration is saved.

Can you please suggest how to fix this?

Re: Issue with config backup

kiwi — Thu, 09 Jan 2020 11:43:34 GMT

Hi @FarzanaMustafa

Is your device managed by Panorama ?

HOW TO EXPORT BACKUPS OF MANAGED DEVICE CONFIGURATION FILES FROM PANORAMA

Hope it helps,

-Kiwi

Re: Issue with config backup

RobinClayton — Thu, 09 Jan 2020 16:35:07 GMT

How are you doing the backup?

Re: Issue with config backup

FarzanaMustafa — Thu, 09 Jan 2020 23:25:10 GMT

@RobinClayton @kiwi

Editing my response.

The device is managed by Panaroma.
I have tried via Panorama as per the link (thank you!) and this one exports the config as following

and the Panorama_000702870043.xml apparently has all the config- including both the firewalls.

What do we do when we need to restore a config for one firewall? example dc2 firewall.
Say, dc2 firewall died and we received a blank replacement – in that case we need to restore dc2 config only.

How is this to be done?

Re: Issue with config backup

BPry — Thu, 09 Jan 2020 23:35:37 GMT

@FarzanaMustafa ,

You would simply need to decompress the folder and import the dc2-firewall-01_002501002685.xml file onto the firewall ('Import named configuration snapshot' in the GUI) and then load ('Load named configuration snapshot') and commit the configuration.

Re: Issue with config backup

RobinClayton — Fri, 10 Jan 2020 08:40:11 GMT

What/Why do you think there is anything missing?

As BPry says, just load the XML to the firewall. Ensure the new F/W is on the same SW version first to ensure compatibility.

If you have not got a spare or anything you can test a re-load, the download and install "Pan Expedition" for free and load the config into that.

Rob

Re: Issue with config backup

FarzanaMustafa — Tue, 14 Jan 2020 05:18:11 GMT

Sorry, just clicked Resolved too soon.

If we only import dc2-firewall-01_002501002685.xml, this file does not have all the config.

The file “Panorama_000702870043.xml” has most of the config ( which also includes dc1’s config)

so if we need to restore dc2 firewall config – under this scenario – what is the full config restoration procedure for dc2 only?

Re: Issue with config backup

RobinClayton — Tue, 14 Jan 2020 08:39:39 GMT

What's Missing???

Also Try a manual backup export from DC2

Rob