Scheduled backup export

[Netzer]

Hi there,

I have a scheduled backup job running every night, which exports my Panorama config to a backup server, it is running for over a year now without any problem.

Yesterday I went over the config, changed the time and permitted the config.

This morning I saw that the backup failed due to missing ECDSA SSH key.

Failed exporting config bundle via ssh to 1x.xx.xx.xx. No ECDSA host key is known for 1x.xx.xx.xx ...Host key verification failed...lost connection

The test connection button on the backup schedule page asks if I want to add the key, system says it added the key but it seems to do nothing. Same message when I press the button again, same error message when the backup job runs again.

Im on Panorama version 10.2.2

Has anyone a hint how to fix or work around that issue?

[TinasheM]

@CKobelsky Got an update from PA Support stating that this will be fixed in 10.2.4 which is going to be released in February 2023.

[SusanACollins]

So has this issue been fixed yet as i too am having this issue.  I have installed the RSA key over and over to no avail and still the scheduled export is failing.  What is the fix please?

[SusanACollins]

Incidentally i am running PAN-OS 10.2.3!!

[Netzer]

The fix was done by the PA support, they got root access and opened a ssh connection to the backup server. Key came up -> yes

Open a case, you cannot fix it by yourself.

[SusanACollins]

Mmmm not going to work as they cant have ssh connection into my client devices.  Since when did vendors think its ok to take root access away from competent engineers with years of experience and hand over to them to jump all over client devices?  At least Checkpoint don't do this.