Schedule Export of Configuration Files
Panorama saves a backup of its running configuration
as well as the running configurations of all managed firewalls.
The backups are in XML format with file names that are based on
serial numbers (of Panorama or the firewalls). Use these instructions
to schedule daily exports of the backups to a remote host. Panorama
exports the backups as a single gzip file. You require superuser
privileges to schedule the export.
If
Panorama has a high availability (HA) configuration, you must perform
these instructions on each peer to ensure the scheduled exports
continue after a failover. Panorama does not synchronize scheduled configuration
exports between HA peers.
To export backups on demand, see Save
and Export Panorama and Firewall Configurations.
- Selectand clickPanoramaScheduled Config ExportAdd.
- Enter aNameandDescriptionfor the scheduled file export andEnableit.
- Using the 24-hour clock format, enter a dailyScheduled Export Start Timeor select one from the drop-down.If you are configuring a scheduled export to two or more servers, stagger the start time of the scheduled exports. Scheduling multiple exports at the same start time results in discrepancies between the exported configurations.
- Set the exportProtocolto Secure Copy (SCP) or File Transfer Protocol (FTP).
- Enter the details for accessing the server, including:Hostnameor IP address,Port,Pathfor uploading the file,Username, andPassword.ThePathsupports the following characters:.(period),+,{and},/,-,_,0-9,a-z, andA-Z. Spaces are not supported in the filePath.If you are exporting to an FTP server using an IPv6 address as theHostname, you must enter the address enclosed in square brackets ([ ]). For example,[2001:0db8:0000:0000:0000:8a2e:0370:7334].If you are exporting to a BSD server, you will need to modify the SSHD password prompt to<username>@<hostname> <password>:.
- (SCP only) ClickTest SCP server connection. To enable the secure transfer of data, you must verify and accept the host key of the SCP server. Panorama doesn’t establish the connection until you accept the host key. If Panorama has an HA configuration, perform this step on each HA peer so that each one accepts the host key of the SCP server. If Panorama can successfully connect to the SCP server, it creates and uploads the test file named ssh-export-test.txt.
- ClickOKto save your changes.
- SelectandCommitCommit to PanoramaCommityour changes.
Recommended For You
Recommended Videos
Recommended videos not found.