On one of education videos it says that in background panorma talks to firewall every 90 mins or so and pulls whole config
from palo alto(local config on palo alto and global config pushed via panorama?
Need to confirm if we have local config on palo alto and that firewall dies then will panorama have whole config of that firewall?
Solved! Go to Solution.
Yes, the local configuration will be stored on panorama for backup. So in case the firewall dies on panorama you still have it until the replacement device arrives at your location.
As far as I know you can only verify on panorama if there is a backup. On the firewall itself I think you have to assume that it works as long as a connection to panorama is up. If the connection to panorama is disconnected for whatever reason, then the firewall will log this event in the system log.
Device specific configs like managment and HA will not be synced to Panorama. Apart from this other configs can be pushed via panorama.
Thanks for replying.
MAin reason for this question is to know if local config apart from device specfic is backed to Panorama or not?
Yes, the local configuration will be stored on panorama for backup. So in case the firewall dies on panorama you still have it until the replacement device arrives at your location.
is there any cli commmand or logs on firewall which can verify that?
I know from panorama we can see the restore backup config for the firewall.
As far as I know you can only verify on panorama if there is a backup. On the firewall itself I think you have to assume that it works as long as a connection to panorama is up. If the connection to panorama is disconnected for whatever reason, then the firewall will log this event in the system log.
Many Thanks !!!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!