How to Schedule Configuration Export on Panorama
If you want to schedule the export of running configurations from all managed devices (as well as Panorama itself), here’s how you can set it up:
Step-by-Step Guide:
Select the Protocol TypeIn Panorama, you can choose either FTP or SCP for exporting configurations. SCP is recommended because it provides encryption (introduced in PAN-OS 5.0), making the export more secure.
Configure the Server for ExportMake sure the FTP or SCP server is accessible from the Panorama management interface, as the export process happens through that interface.
Schedule the Configuration ExportTo set up the scheduled export, follow these steps in the WebGUI:
Go to Panorama > Scheduled Configuration Export.
Name: Give the export job a unique name to identify it.
Description: You can add an optional description to provide more details about the export job.
Enable: Check the box to enable the export job.
Scheduled Export Start Time: Set the time of day you want the export to start. You can specify it to run daily.
Hostname: Enter the IP address or host name of the target FTP or SCP server.
Protocol: Choose SCP (for secure export) or FTP (less secure, but still an option).
Path: Specify the folder or directory path where you want the configuration to be saved on the server.
Port: Enter the port number used by the server.
Passive Mode: If you're using FTP, you can select passive mode for the connection.
Username: Provide the username for the target system.
Password: Confirm the password for the specified username.
Commit the ChangesOnce everything is set up, commit the changes so the scheduled export can run as planned.
Important Notes:
For Panorama versions 4.1 and earlier, only FTP is available for scheduled configuration exports (no SCP option).
The export happens via the management interface of Panorama, so ensure the target server is reachable through that.