It is possible to export/import a configuration file or a device state using the commands listed below. One can also create a backup config.
Firewall: Commands to save the configuration backup:
admin@FW>configure
Entering configuration mode
admin@FW# save config to MyBackup.xml
Config saved to MyBackup.xml
TFTP Export of configuration:
admin@PA-220> tftp export configuration from MyBackup.xml to <tftphost>
SCP Export of configuration:
admin@PA-220> scp export configuration from MyBackup.xml to user@<scphost>:/path
TFTP Import of configuration:
admin@PA-220> tftp import configuration from <tftphost> file <remotepath>
SCP Import of configuration:
admin@PA-220> scp import configuration from user@<scphost:/path
TFTP Export of Device State:
admin@PA-220> tftp export device-state to <tftphost>
SCP Export of Device State:
admin@PA-220> scp export device-state to username@<scphost>:/path
TFTP Import of Device State:
admin@PA-220> tftp import device-state from <tftphost> file <remotepath>
SCP Import of Device State:
admin@PA-220> scp import device-state from username@<scphost:>path
To extract device state of firewall from Panorama follow the below KB.
How to Export Device State of Managed Firewalls from Panorama