How to export firewall config along with pushed panorama policies using SCP

[Sathyac]

We tried 'scp export configuration' cmd to get firewall config. But it has only local policies.  Is there a way to get all (including shared) policies in config file using SCP protocol?

Thanks in Advance.

[BPry]

Which file exactly did you export out of the configuration option? The running-config.xml should include everything you are looking for, are you sure you chose the proper file? 

[Sathyac]

Thanks for the reply . I executed below cmd

scp export configuration remote-port 22 source-ip <PA_IP> from running-config.xml to username@scp_server:/

The file has only local policies. Do I need to change any configuration on Panorama? 

[davanderson]

You can run your command to export the configuration on the Panorma appliance (just like you did on the FW).  I would export both the Panorama and the FW.

[Sathyac]

Thank you. Will try that.

[reaper]

if you export the device state (scp export device-state), this will include the panorama config

panorama config is not stored in the running-config.xml

the device state will export a compressed file containing a few subfolders including the template xml and the pretrans xmls