Secure Copy Protocol (SCP) Support
Focus
Focus
What's New in the NetSec Platform

Secure Copy Protocol (SCP) Support

Table of Contents

Secure Copy Protocol (SCP) Support

Enable Secure Copy Protocol (SCP) uploads for Superuser administrators to upload supported files from your local device.
In air-gapped deployments where your devices have no outbound internet connection, you can enable Secure Copy Protocol (SCP) to upload supported file types to an air-gapped device. To perform an SCP upload, you must enable SCP upload functionality for each specific Superuser administrator you want to allow to perform an SCP upload, and isn't a global device configuration. Once SCP uploads are enabled for a Superuser admin, you can use this admin to write scripts and automation for supported file uploads directly to your air-gapped device using the CLI rather than the web interface.
SCP upload are supported from devices running a Microsoft Windows, macOS, or any Linux operating system. SCP upload must be performed from your device command line. SCP applications like WinSCP and FileZilla are not supported. A system log is generated when you successfully SCP a file to your device or if an SCP upload fails for any reason.
You can SCP the following files to your device:
  • PAN-OS Software Versions/scp/software/
  • PAN-OS Software Patches/scp/patch/
  • Application & Threats Content Updates/scp/content/
  • WildFire Content Updates/scp/wildfire/
  • Antivirus Content Updates/scp/anti-virus/
  • PAN-OS Plugin Versions/scp/plugin/
  • XML Configuration Files/scp/config/
  • License Key Files/scp/license/