topic Re: Scheduled Configuration export From Panorama To SFTP server in General Topics

Scheduled Configuration export From Panorama To SFTP server

Sethupathi — Wed, 22 Apr 2020 08:24:52 GMT

Hi Team,

I have configured Scheduled Configuration export to linux SFTP server, it doesn't work.

Hence I'm using default sftp port 22. But in configuration I could only saw the option that can export only using FTP or SCP.

I've tried using winSCP its working. But when I tried using cli command to export the "configuration.xml" file from panorama to SFTP server with port 22 it's not working.

In Panorama when tried using CLI command to export the "config.xml" file I found only FTP & TFTP not SFTP.

admin@BSDCPanorama-01(primary-active)> tftp export configuration remote-port 22 from Snap_18042020 to 172.21.32.4
mode set to octet
Connected to 172.21.32.4 (172.21.32.4), port 22
putting /opt/pancfg/mgmt/saved-configs/Snap_18042020 to 172.21.32.4:Snap_18042020 [octet]
Transfer timed out.
admin@BSDCPanorama-01(primary-active)>

1. Does SFTP supports to export the configuration from panorama?

2. Can we export the configuration.xml file to SFTP server using SCP?

If yes please clarify how to accept the host key.

when tried test scp server connection getting below error:

Can any one please help us here! Didn't found any related articles about this query.

Regards,

Sethu

Re: Scheduled Configuration export From Panorama To SFTP server

reaper — Thu, 30 Apr 2020 11:06:12 GMT

The supported protocols are tftp, ftp and scp

Re: Scheduled Configuration export From Panorama To SFTP server

AaronAxvig — Wed, 28 Sep 2022 17:02:19 GMT

I kind of doubt that TFTP is supported (anymore?). Only SCP and FTP are shown as options, and I am unable to commit a configuration for FTP that does not include a username (thinking that if I specify the well-known TFTP port of 69 that it would internally know to do TFTP even though FTP is the selected protocol). TFTP does not support authentication so I'm not sure what I would put in as a username.

I'm testing on Panorama 10.2.2. Trying to get it to upload to Solarwinds SCP/SFTP server and struggling...separate issue but thought I could provide more info to this discussion.

Re: Scheduled Configuration export From Panorama To SFTP server

OtakarKlier — Wed, 28 Sep 2022 18:10:07 GMT

Hello,

I do this via the API. Here is the link to the article.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7yCAC

Regards,

Re: Scheduled Configuration export From Panorama To SFTP server

AaronAxvig — Wed, 28 Sep 2022 18:32:26 GMT

Even though that is for firewalls when not managed by Panorama, and this thread is about backing up Panorama's config itself, I suspect it could work for Panorama. But I am not that interested in doing this using a scheduled task on a secondary device.