>
    Strata Copilot
    Panorama > Scheduled Config Export
    Focus
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Panorama Web Interface
    4. Panorama > Scheduled Config Export
    Next-Generation Firewall

    Panorama > Scheduled Config Export

    Table of Contents

    Panorama > Scheduled Config Export

    To schedule an export of all the running configurations on Panorama and firewalls, Add an export task and configure the settings as described in the following table.
    If Panorama has a high availability (HA) configuration, you must perform these instructions on each peer to ensure the scheduled exports continue after a failover. Panorama does not synchronize scheduled configuration exports between HA peers.
    Scheduled Configuration Export Settings
    Description
    Name
    Enter a name to identify the configuration export job (up to 31 characters). The name is case-sensitive and must be unique. Use only letters, numbers, hyphens, and underscores.
    Description
    Enter an optional description.
    Enable
    Select to enable the export job.
    Scheduled export start time (daily)
    Specify the time of day to start the export (24 hour clock, format HH:MM).
    Protocol
    Select the protocol to use to export logs from Panorama to a remote host. Secure Copy (SCP) is a secure protocol; FTP is not.
    Hostname
    Enter the IP address or hostname of the target SCP or FTP server.
    Port
    Enter the port number on the target server.
    Path
    Specify the path to the folder or directory on the target server that will store the exported configuration.
    For example, if the configuration bundle is stored in a folder called exported_config within a top level folder called Panorama, the syntax for each server type is:
    • SCP server: /Panorama/exported_config
    • FTP server: //Panorama/exported_config
    The following characters: .(period), +, { and }, /, -, _, 0-9, a-z, and A-Z. Spaces are not supported in the file Path.
    Enable FTP Passive Mode
    Select to use FTP passive mode.
    Username
    Specify the username required to access the target system.
    Password / Confirm Password
    Specify the password required to access the target system.
    Use a password with maximum length of 15 characters. If the password exceeds 15 characters, the test SCP connection will display an error because the firewall encrypts the password when it tries to connect to the SCP server and the length of the encrypted password can be up to 63 characters only.
    Test SCP server connection
    Select to test communication between Panorama and the SCP host/server.
    (PAN-OS 10.1.8 and earlier releases) To enable the secure transfer of data, you must verify and accept the host key of the SCP server. The connection is not established until the host key is accepted. If Panorama has an HA configuration, you must perform this verification on each HA peer so that each one accepts the host key of the SCP server.
    (PAN-OS 10.1.9 and later releases) A pop-up window is displayed requiring you to enter a clear text Passwordand then to Confirm Password in order to test the SCP server connection and enable the secure transfer of data. If Panorama has an HA configuration, perform this step on each HA peer so that each one can successfully connect to the SCP server. If Panorama can successfully connect to the SCP server.

    © 2025 Palo Alto Networks, Inc. All rights reserved.