Automatic backup - Palo Alto

[Paulo_Aun1]

I would like to know how to perform automatic backup of Palo Alto and automatically copy every morning for a server backup.Can you help me?

best regards,

Paul Aun

[gbogojevic]

Hi,

You can use XML API for configuration backup. More info can be found here: How to use the XML API to backup your firewall configuration

On panorama device, there is option for scheduled config export (SCP and FTP) but for firewalls you can use XML API.

[HULK]

Hello Paulo_Aun,

You can achieve it through two ways.

1. Write a script on Server to pull/scp/tftp configuration from Firewall.

-------------------------------

>tftp export configuration to  <tftp host>

>tftp import configuration from <tftp host>

>scp export configuration to <username@host:path >

>scp import configuration from  <username@host:path >

------------------------------

2. OR configure panorama to have scheduled back up:How to Schedule Configuration Export on Panorama?

A similar discussion for your reference:Backup Configuration of a PA-200

Hope this helps.

Thanks

[Paulo_Aun1]

and how do I schedule the backup? do you know ? I would like to create a routine that every day 2 am the backup is done

[_slv_]

Hello

On serwer/workstation where You would like to keep backup use scheduler and connect it to your backup script

Marco Leckel create very detailed info how to connect to PA device Backup Configuration of a PA-200

I added few more command to keep backup in zip file and have a date in file name:

ren config.xml PA200config_%date:/=.%.xml

7z a -tzip "C:PA200_configs.zip" "*.xml" -mx5

del *.xml

You have to put 7z.exe in same directory as a script.

Regards

Slawek