[rancid] Restore a Palo Alto Firewall from a Rancid bacup

Gauthier, Chris cgauthier at comscore.com
Fri Jul 12 18:15:39 UTC 2019

Rancid configs for PAN can NOT be used to restore the config, unless you cut and paste the configuration.  This is because the native config files are stored in XML format and that is the format the Palo Alto utilities expect when performing restorations.


Chris Gauthier Senior Network Engineer | Comscore
t +1 (503) 331-2704 | 
cgauthier at comscore.com
​​​This e-mail (including any attachments) may contain information that is private, confidential, or protected by attorney-client or other privilege. If you received this e-mail in error, please delete it from your system and notify sender.
-----Original Message-----
From: Rancid-discuss <rancid-discuss-bounces at shrubbery.net> on behalf of john heasley <heas at shrubbery.net>
Date: Friday, July 5, 2019 at 10:43 AM
Cc: "rancid-discuss at shrubbery.net" <rancid-discuss at shrubbery.net>
Subject: Re: [rancid] Restore a Palo Alto Firewall from a Rancid bacup

Thu, Jul 04, 2019 at 08:23:51AM +0000, STUART WALTON:
> Hi
> Has anyone used a backup from Rancid to restore a Palo Alto Firewall?
> If so how have you done it?  (I have the backup but it does not appear to be in the correct format)
> I have searched the discussion but cannot seem to find the answer. Any help would be appreciated.

I do not know much of anything about PAN devices.  However, be aware that,
depending upon your rancid configuration, passwords may be removed.  Also,
see the FAQ S1 Q5 for another caveat that may apply to PAN.

Also, include the error you received when attempting to load the config.
It might provide clue to someone with more experience with PAN.

Rancid-discuss mailing list
Rancid-discuss at shrubbery.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20190712/4822defc/attachment.html>

More information about the Rancid-discuss mailing list