Manage Configuration Backups; Schedule Export Of Configuration Files - PaloAlto Networks Panorama 6.1 Administrator's Manual

Manage Configuration Backups
Manage Configuration Backups
A configuration backup is a snapshot of the system configuration. In case of a system failure or a
misconfiguration, a configuration backup allows you to restore Panorama to a previously saved version of
the configuration. On Panorama, you can manage configuration backups of the managed firewalls and that
of Panorama:
Manage configuration backups of the managed devices—Panorama automatically saves every

configuration change that is committed to a managed firewall running PAN‐OS version 5.0 or later. By
default, Panorama stores up to 100 versions for each firewall. This value is configurable.
Manage Panorama configuration backups—You can manually export the running configuration of

Panorama, as required.
Export a configuration file package—In addition to its own running configuration, Panorama saves a

backup of the running configuration from all managed firewalls. You can generate a gzip package of the
latest version of the configuration backup of Panorama and that of each managed firewall either
on‐demand or schedule an export using the
scheduled for daily delivery to an FTP server or a Secure Copy (SCP) server; the files in the package are
in an XML format, and each file name references the firewall serial number for easy identification.
You can perform the following tasks to manage configuration backups:
Schedule Export of Configuration Files

Manage Panorama Configuration Backups

Configure the Number of Configuration Backups Panorama Stores

Load a Configuration Backup on a Managed Firewall

Schedule Export of Configuration Files
Use these instructions to schedule daily exports of the configuration file package that contains the backup
of the running configuration of Panorama and the managed firewalls. You require superuser privileges to
configure the export.
If Panorama has a high availability (HA) configuration, you must perform these instructions on each peer to
ensure the scheduled exports continue after a failover. Panorama does not synchronize scheduled
configuration exports between HA peers.
190 • Panorama 6.1 Administrator's Guide
capability. The package can be
Scheduled Config Export
Administer Panorama
© Palo Alto Networks, Inc.