[rancid] Palo Alto Configuration Backup

Peter Jackson peterjackson1610 at gmail.com
Thu Dec 19 02:02:19 UTC 2013


We ran into a lot of issues trying to restore PAs from text configs.

First of all, we have never been able to completely configure a Palo Alto from the CLI so we have always at least had to clean/finish things up in the GUI.

We also found some issues at the CLI with the firewalls not taking some of the commands as they show up in show config.

AFAIK PAN does not have an automated configuration backup.  Panorama has the capability but I can't remember if it can be automated.

We use RANCID with PAs mainly to keep configurations consistent and to create informational webpages from the saved configs and command output.

Sent from my mobile phone

> On Dec 18, 2013, at 12:32 PM, Adam Stirk <A.Stirk at macintoshfashion.co.uk> wrote:
> 
> HI,
>  
> We’ve just start using RANCID to backup our Palo Alto firewalls using the contributed scripts. Now we have these backups we are trying to test them, which I’m having problems with as the backups don’t seem to be in the correct format.
>  
> Has anyone else tried to use these backups to restore a device?
>  
> Thanks
>  
> Adam
> _______________________________________________
> Rancid-discuss mailing list
> Rancid-discuss at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/rancid-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20131218/2f4d8b26/attachment.html>


More information about the Rancid-discuss mailing list