Backup and restore Config

[kaysun]

I have a PA-500 Firewall running software version 4.1 and have to make some rather drastic firewall changes due to changing ISP's and outside IP addressing.  I would like to backup and save my configuration, in case I mess something up.  How can I take a backup of my current config, and have it ready in case I need to import it back in?

I see you can "Save named configuration snapshot" as well as "Save Candidate Configuration".  What are the differences with these?  Do I then just load them back in using the Load named and candidate configs?

Any help would be greatly appreciated.

Thanks!

[ppatel · Accepted solution]

Hi,

Here is the link on how to back up/Export a configuration that you know is working good. The steps in this document involves saving a named configuration snapshot.

The document is for 4.0 but it also applies for 4.1.

https://live.paloaltonetworks.com/docs/DOC-2752

When you commit a configuration, the configuration you see (that is pushed on to the device) becomes the running configuration.

You can then export the running configuration from the device. Go To Device--> Setup-->Export configuration version-->Select  running() from drop down list.

Once the configuration is committed and you want to make further change on the device but do not want to commit, you can either do "Save candidate configuration or save named configuration sanpshot.

Save Candidate configuration will overwrite previously saved candidate configuration.

Saved named configuration snapshot will ask you to give a name of the configuration which will be saved on the device and can be exported as a backup for later use.

Let me know if that helps.

Regards,

Parth