Issue with config backup

[FarzanaMustafa]

PANOS 8.1.9

When we are doing the config backup we do not see all the config is getting backed up – for example, the firewall rules, NAT and port forwarding rules are not seen in the backup – Apparently a very fraction of the configuration is saved.

Can you please suggest how to fix this?

[kiwi · Accepted solution]

Hi @FarzanaMustafa 

Is your device managed by Panorama ?

HOW TO EXPORT BACKUPS OF MANAGED DEVICE CONFIGURATION FILES FROM PANORAMA 

Hope it helps,

-Kiwi

[RobinClayton]

How are you doing the backup?

[FarzanaMustafa]

@RobinClayton @kiwi 

Editing my response.

The device is managed by Panaroma.
I have tried via Panorama as per the link (thank you!) and this one exports the config as following

and the Panorama_000702870043.xml apparently has all the config- including both the firewalls.

What do we do when we need to restore a config for one firewall? example dc2 firewall.
Say, dc2 firewall died and we received a blank replacement – in that case we need to restore dc2 config only.

How is this to be done?

[BPry · Accepted solution]

@FarzanaMustafa ,

You would simply need to decompress the folder and import the dc2-firewall-01_002501002685.xml file onto the firewall ('Import named configuration snapshot' in the GUI) and then load ('Load named configuration snapshot') and commit the configuration. 

[RobinClayton]

What/Why do you think there is anything missing?

As BPry says, just load the XML to the firewall. Ensure the new F/W is on the same SW version first to ensure compatibility.

If you have not got a spare or anything you can test a re-load, the download and install "Pan Expedition" for free and load the config into that.

Rob

[FarzanaMustafa]

Sorry, just clicked Resolved too soon.

If we only import dc2-firewall-01_002501002685.xml, this file does not have all the config.

The file “Panorama_000702870043.xml” has most of the config ( which also includes dc1’s config)

so if we need to restore dc2 firewall config – under this scenario – what is the full config restoration procedure for dc2 only?

[RobinClayton]

What's Missing???

Also Try a manual backup export from DC2

Rob