Q: How do you export and import Palo Alto Firewall configuration?
- To exported PA firewall configuration, you need to save named configuration by going to Device>Setup>Operation. Click on Save Named Configuration and enter the file name with .xml.
2. To export it, under Configuration Management, click on Exported named configuration snapshot. Select the saved name configuration in step 1.
Or From the CLI:
> scp export configuration [tab for command help]
For example,
> scp export configuration from 2014-09-22_CurrentConfig.xml to username@scpserver/PanConfigs
Note: A single ‘/’ specified after the username@scpserver denotes a path that begins in that user’s home directory. Using ‘//’ means a path that starts at the root of the file system.
3. To Import: From the GUI, go to Device > Setup > Operations and click Import named configuration snapshot and enter the Exported name configuration file.
This can also be done from the CLI:
For example:
> scp import configuration username@scpserver/PanConfigs/2014-09-22_CurrentConfig.xml
4. Load an imported configuration.
From the GUI, go to Device > Setup > Operations and click Load named configuration snapshot. When the configuration has been selected, click OK and commit the configuration.
This can also be done from the CLI, for example:
> configure
# load config from 2014-09-22_CurrentConfig.xml
# commit
# exit
>
Note: 1. Make sure both firewall are running the same version of the software.
2. If they are not, some configuration may not work
3. Some hardware settings may not change, for example Ip address and S/N.
