Panorama saves a backup of its running configuration
as well as the running configurations of all managed firewalls.
The backups are in XML format with file names that are based on
serial numbers (of Panorama or the firewalls). Use these instructions to
schedule daily exports of the backups to a remote host. Panorama
exports the backups as a single gzip file. You require superuser
privileges to schedule the export.
Panorama has a high availability (HA) configuration, you must perform these
instructions on each peer to ensure the scheduled exports continue
after a failover. Panorama does not synchronize scheduled configuration
exports between HA peers.
If you are configuring a scheduled
export to two or more servers, stagger the start time of the scheduled
exports. Scheduling multiple exports at the same start time results
in discrepancies between the exported configurations.
Set the export
) or File Transfer Protocol (
Export to devices running Windows support only
Enter the details for accessing the server, including:
uploading the file,
supports the following
. Spaces are
not supported in the file
you are exporting to a BSD server, you will need to modify the SSHD password
Test SCP server
. To enable the secure transfer of data, you
must verify and accept the host key of the SCP server. Panorama doesn’t
establish the connection until you accept the host key. If Panorama
has an HA configuration, perform this step on each HA peer so that
each one accepts the host key of the SCP server. If Panorama can
successfully connect to the SCP server, it creates and uploads the
test file named ssh-export-test.txt.