Scheduled Configuration export From Panorama To SFTP server

[Sethupathi]

Hi Team,

I have configured Scheduled Configuration export to linux SFTP server, it doesn't work.

Hence I'm using default sftp port 22. But in configuration I could only saw the option that can export only using FTP or SCP.

I've tried using winSCP its working. But when I tried using cli command to export the "configuration.xml" file from panorama to SFTP server with port 22 it's not working.

In Panorama when tried using CLI command to export the "config.xml" file I found only FTP & TFTP not SFTP. 

admin@BSDCPanorama-01(primary-active)> tftp export configuration remote-port 22 from Snap_18042020 to 172.21.32.4
mode set to octet
Connected to 172.21.32.4 (172.21.32.4), port 22
putting /opt/pancfg/mgmt/saved-configs/Snap_18042020 to 172.21.32.4:Snap_18042020 [octet]
Transfer timed out.
admin@BSDCPanorama-01(primary-active)>

1. Does SFTP supports to export the configuration from panorama? 

2. Can we export the configuration.xml file to SFTP server using SCP?

If yes please clarify how to accept the host key.

when tried test scp server connection getting below error:

Can any one please help us here! Didn't found any related articles about this query.

-

Regards,

Sethu

[reaper]

The supported protocols are tftp, ftp and scp

[AaronAxvig]

I kind of doubt that TFTP is supported (anymore?).  Only SCP and FTP are shown as options, and I am unable to commit a configuration for FTP that does not include a username (thinking that if I specify the well-known TFTP port of 69 that it would internally know to do TFTP even though FTP is the selected protocol).  TFTP does not support authentication so I'm not sure what I would put in as a username.

I'm testing on Panorama 10.2.2.  Trying to get it to upload to Solarwinds SCP/SFTP server and struggling...separate issue but thought I could provide more info to this discussion.

[OtakarKlier]

Hello,

I do this via the API. Here is the link to the article.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm7yCAC

Regards,

[AaronAxvig]

Even though that is for firewalls when not managed by Panorama, and this thread is about backing up Panorama's config itself, I suspect it could work for Panorama.  But I am not that interested in doing this using a scheduled task on a secondary device.