Focus

Panorama Administrator's Guide

Schedule Export of Configuration Files

Table of Contents

Schedule Export of Configuration Files

Panorama saves a backup of its running configuration as well as the running configurations of all managed firewalls. The backups are in XML format with file names that are based on serial numbers (of Panorama or the firewalls). Use these instructions to schedule daily exports of the backups to a remote host. Panorama exports the backups as a single gzip file. You require superuser privileges to schedule the export.

If Panorama has a high availability (HA) configuration, you must perform these instructions on each peer to ensure the scheduled exports continue after a failover. Panorama does not synchronize scheduled configuration exports between HA peers.

To export backups on demand, see Save and Export Panorama and Firewall Configurations.

Select

Panorama

Scheduled Config Export

and click

Add

Enter a

Name

and

Description

for the scheduled file export and

Enable

it.

Using the 24-hour clock format, enter a daily

Scheduled Export Start Time

or select one from the drop-down.

If you are configuring a scheduled export to two or more servers, stagger the start time of the scheduled exports. Scheduling multiple exports at the same start time results in discrepancies between the exported configurations.

Set the export

Protocol

to Secure Copy (

SCP

) or File Transfer Protocol (

FTP

Export to devices running Windows support only

FTP

Enter the details for accessing the server, including:

Hostname

or IP address,

Port

Path

for uploading the file,

Username

, and

Password

The

Path

supports the following characters:

(period),

{

and

}

, and

. Spaces are not supported in the file

Path

If you are exporting to an FTP server using an IPv6 address as the

Hostname

, you must enter the address enclosed in square brackets ([ ]). For example,

[2001:0db8:0000:0000:0000:8a2e:0370:7334]

If you are exporting to a BSD server, you will need to modify the SSHD password prompt to

<username>@<hostname> <password>:

(SCP only) Click

Test SCP server connection

. To enable the secure transfer of data, you must verify and accept the host key of the SCP server. Panorama doesn’t establish the connection until you accept the host key. If Panorama has an HA configuration, perform this step on each HA peer so that each one accepts the host key of the SCP server. If Panorama can successfully connect to the SCP server, it creates and uploads the test file named ssh-export-test.txt.

Click

to save your changes.

Select

Commit

Commit to Panorama

and

Commit

your changes.

Manage Panorama and Firewall Configuration Backups

Save and Export Panorama and Firewall Configurations

Panorama Administrator's Guide

Schedule Export of Configuration Files

Schedule Export of Configuration Files

Recommended For You