PANORAMA PA Firewall Management -> entire backup of the Firewall Running Config

[CarloTaddei]

Hi,

we are managing a pool of PA Firewalls using Panorama.

Some of the settings are pushed to the managed devices via Templates (i.e. several additional users, shared objects, etc.).

Device Config is saved on a regular basis on the device itself as well as on the Panorama.

However what I do not understand is that, if I save and export the device config locally on the unit as well as on Panorama, I do not seem to get a full device config -> i.e. only a fraction of the users are listed.

Am I missing something ?

Is there a way to save the entire current running config of the firewall (for disaster recovery ?)

[reaper]

The local firewall saves it's local config while panorama saves the panorama config+templates

This so you can quickly stage a local replacement device with the local config, whatever the location is, and then push the shared config/templates onto it

For a quick one-time (non-automated, but manual intervention) config copy, you can export and import the device state (rather than the config file) which is the device's 'running' situation