Scheduled backup export

[Netzer]

Hi there,

I have a scheduled backup job running every night, which exports my Panorama config to a backup server, it is running for over a year now without any problem.

Yesterday I went over the config, changed the time and permitted the config.

This morning I saw that the backup failed due to missing ECDSA SSH key.

Failed exporting config bundle via ssh to 1x.xx.xx.xx. No ECDSA host key is known for 1x.xx.xx.xx ...Host key verification failed...lost connection

The test connection button on the backup schedule page asks if I want to add the key, system says it added the key but it seems to do nothing. Same message when I press the button again, same error message when the backup job runs again.

Im on Panorama version 10.2.2

Has anyone a hint how to fix or work around that issue?

[Netzer]

We could fix the problem temporarily yesterday during our support session. The TAC guy logged in via root to Panorama. Then a simple ssh [user]@[backup-server-ip] was all whats needed. SSH key got saved and the web gui scheduled export function was working again.

They gonna check the issue and hopefully it will be fixed soon.

[Netzer]

Just got the info from my support partner, that the issue has been analyzed by PA and will be fixed in Version 10.2.3, release date is planed for next month.

[CKobelsky]

@PaulMarroquin my system is not in FIPS mode.  I did get "confirmation" from the Palo Alto tech as well that it is a glitch and it will be fixed in the next version (whether it was actually confirmation or just took this thread at it's word I'm not sure)

[Pablo-Molina]

Hi all,

Today I upgraded to 10.2.3 version and problem with Scheduled Config Export via SCP still appears. Somebody upgraded to 10.2.3 and also obtain the same results?

[CKobelsky]

@Pablo-Molina @Netzer @PaulMarroquin @ahandoo I just upgraded to 10.2.3 on Panorama and this issue is still there.  The release notes didn't seem to mention this problem either.