Back Up Panorama and Firewall Configurations

Creating Panorama configuration backups enables you to later Restore a Panorama Configuration. This is useful when you want to revert Panorama to all the settings of an earlier configuration; you can perform the restoration as a single operation instead of manually reconfiguring each setting in the current configuration.

As a best practice, back up any important configuration to a host external to Panorama.

When you commit changes, Panorama automatically saves a new version of the running configuration. If a system event or administrator action causes Panorama to reboot, it automatically reverts to the current version of the running configuration, which Panorama stores in a file named running-config.xml. However, Panorama does not automatically save the candidate configuration to persistent storage. You must manually save the candidate configuration as a default snapshot file (.snapshot.xml) or as a custom-named snapshot file.

Back Up Panorama and Firewall Configurations
Save a snapshot of the candidate configuration if it contains changes that you want to preserve in the event Panorama reboots. Panorama stores the snapshot locally.	To create or overwrite the default snapshot file (.snapshot.xml), click Save at the top of the web interface. To create a candidate configuration snapshot that does not overwrite the default snapshot: Select Panorama > Setup > Operations and Save named Panorama configuration snapshot. Enter a Name for the snapshot or select an existing snapshot to overwrite. Click OK and Close.
Export a candidate or running configuration to a host external to Panorama or to a firewall.	Select Panorama > Setup > Operations and click an export option: Export named Panorama configuration snapshot —Export the current running configuration, a named candidate configuration snapshot, or a previously imported configuration (candidate or running). Panorama exports the configuration as an XML file with the Name you specify. Export Panorama configuration version —Select a Version of the running configuration to export as an XML file. Export Panorama and devices config bundle —Generate and export the latest version of the running configuration backup of Panorama and of each managed firewall. To automate the process of creating and exporting the configuration bundle daily to a Secure Copy (SCP) or FTP server, see Schedule Export of Configuration Files. Export or push device config bundle —After you import a firewall configuration into Panorama, Panorama creates a firewall configuration bundle named <firewall_name>_import.tgz, in which all local policies and objects are removed. You can then Export or push device config bundle to perform one of the following actions: Push & Commit the configuration bundle to the firewall to remove any local configuration from it, enabling you to manage the firewall from Panorama. Export the configuration to the firewall without loading it. When you are ready to load the configuration, log in to the firewall CLI and run the configuration mode command load device-state . This command cleans the firewall in the same way as the Push & Commit option. The full procedure to Transition a Firewall to Panorama Management requires additional steps.

Document:Panorama™ Administrator’s Guide

Back Up Panorama and Firewall Configurations

Related Documentation

Document:Panorama™ Administrator’s Guide

Back Up Panorama and Firewall Configurations

Related Documentation

Restore a Panorama Configuration

Back Up a Configuration

Save Candidate Configurations

Device > Setup > Operations

Restore a Configuration

Transition a Firewall to Panorama Management

Switch Between the BYOL and the PAYG Licenses

Use Secure Copy to Import and Export Files

Schedule Export of Configuration Files

Migrate from an M-Series Appliance to a Panorama Virtual Appliance