backing up running-config.xml or set cli config-output-format set

[chris.maughan]

Hi all

very basic question however im unable to find a search function here ?? 

is there a way i can scp the runing-config.xml from the firewall. NOT export from the firewall

basically im trying to scp the running-config.xml however im unable to firn the file path 

i have tried "scp username@1.1.1.1:running-config.xml" however this does not find the file.

thanks 

[aleksandar.astardzhiev]

Hi @chris.maughan ,

You definitely wouldn't make to download config file with " scp username@1.1.1.1:running-config.xml". This would be that connected SSH user will be put the same directory where the target file is place, which doesn't seems right

Even if you the exact location of the config file I don't believe there is a way you can SCP file when initiating connection from remote server to the firewall.

PanOS firewall is hardened Unix-based OS, which put the connected user into custom shell is restricted access. In nutshell SCP is just establishing SSH and then perform some BASH commands, however as mentioned PanOS restricted shell does not allow the use of this  standard bash commands, which why any attempt to SCP from remote host to the firewall will fail.

I am afraid SCP from firewall to remote host is the only option here.

Another option would be using API and schedule script to periodically export config over API -  How to Export The Device State Using XML API - Knowledge Base - Palo Alto Networks