Schedule Export of Configuration Files Questions

[NevinN]

Hi All,

My goal is to set up a daily backup of Panorama/Firewall Configs.

Regarding config backups, does anyone know if the OS matters? For example, the SCP/FTP server is UNIX vs Windows where the logs are stored?

I also understand only Panorama can do this. How would I do this with all firewalls? The article below states that "Panorama saves a backup of its running configuration as well as the running configurations of all managed firewalls." but I don't see firewalls mentioned under Paorama -> Scheduled Config Export.

https://docs.paloaltonetworks.com/panorama/10-0/panorama-admin/administer-panorama/manage-panorama-a...

[SteveCantwell]

That is because the Panorama is the central repository of the XML and will zip up the configurations for all hardware (Panorama and FWs).  I have been doing PS for 10 yrs, so I am pretty comfortable in stating that this is how the product works.

As to where the files are saved, it is in whatever directory you configure on the server and configure that directory in the Panorama settings. 

[PuviAR]

@SteveCantwell , So if we're using Windows OS, only FTP is supported. In which OS environment can we try SCP to take periodic configuration export?

[SteveCantwell]

Here is a link to find some favorite SCP server apps for Windows

https://www.itprc.com/the-best-scp-servers-for-windows/

[PuviAR]

I didn't ask for scp software for windows. As per PA documentation, if we're using windows for config export, panorama only supports FTP. If we need scp protocol to be used for export, either unix or linux server needed. please correct me if I' m wrong.