Palo Alto Networks Knowledgebase: How to Back up Panorama

How to Back up Panorama

13493
Created On 02/08/19 00:04 AM - Last Updated 02/08/19 00:04 AM
Cortex Data Lake Panorama
Resolution

Overview

Panorama saves a backup of every committed configuration from each device it manages. In addition, Panorama saves copies of its own committed configurations. To facilitate off-box backup requirements, the system supports a method to regularly export these backups to an external data store. This document describes the steps to back up Panorama.

 

Steps

Managing device backups from the Web UI:

To manage device backups on Panorama:

  1. Go to Panorama > Managed Devices.
  2. Click Manage in the Backups column for a device.
    This brings up a window showing saved and committed configurations for the device.
  3. Click Load to restore the selected configuration to the device.
    Capture10.PNG.png
  4. To remove a saved configuration, click .

 

Managing Panorama Configuration Backups from the GUI

  1. Go to Panorama > Setup > Operations.
  2. Click “Export named Panorama configuration snapshot” or “Export Panorama configuration version” under the Configuration Management section.
  3. Select the configuration from the configuration drop down list in the pop-up window.
  4. Click OK.
    Capture11.PNG.png

 

Manual Export and Import of Panorama Configuration from the CLI

On the CLI, the commands below will export the Panorama configuration:

> tftp export configuration

with the following parameters:

  • remote-port tftp server port
  • source-ip Set source address to specified interface address
  • from from
  • to tftp host

 

> scp export configuration

with the following parameters:

  • remote-port SSH port number on remote host
  • source-ip Set source address to specified interface address
  • from from
  • to destination (username@host:path)

 

To import Panorma’s configuration from the CLI, use the following command:

> tftp import configuration from 1.2.3.4 file c:/a/b/c

 

To export Panorama’s entire log database, use the following command:

> scp export logdb to
  <value>  Destination (username@host:path)

 

To import a Panorama log database, use the following command:

> scp import logdb from userabc@1.2.4.3:c/a/b/c

Note: 

For LogDBs larger than 2 TB the export will fail. The failure comes from the tarring lack of /tmp space for operation and archiving failure. 

 

owner: swhyte



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClgWCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language