does panorama gets local config from firewall

[MP18]

On one of education videos it says that in background panorma talks to firewall every 90 mins or so and pulls whole config

from palo alto(local config on palo alto and global config pushed via panorama?

Need to confirm if we have local config on palo alto and that firewall dies then will panorama have whole config of that firewall?

[vsys_remo · Accepted solution]

Yes, the local configuration will be stored on panorama for backup. So in case the firewall dies on panorama you still have it until the replacement device arrives at your location.

[vsys_remo · Accepted solution]

As far as I know you can only verify on panorama if there is a backup. On the firewall itself I think you have to assume that it works as long as a connection to panorama is up. If the connection to panorama is disconnected for whatever reason, then the firewall will log this event in the system log.

[Venuprasad]

Device specific configs like managment and HA will not be synced to Panorama. Apart from this other configs can be pushed via panorama.

[MP18]

Thanks for replying.

MAin reason for this question is to know if local config apart from device specfic is backed to Panorama or not?

[vsys_remo · Accepted solution]

Yes, the local configuration will be stored on panorama for backup. So in case the firewall dies on panorama you still have it until the replacement device arrives at your location.

[MP18]

is there any cli commmand or logs on firewall which  can verify that?

I know from panorama we can see the restore backup config for the firewall.

[vsys_remo · Accepted solution]

As far as I know you can only verify on panorama if there is a backup. On the firewall itself I think you have to assume that it works as long as a connection to panorama is up. If the connection to panorama is disconnected for whatever reason, then the firewall will log this event in the system log.

[MP18]

Many Thanks !!!