Automated configuration backup of Palo Alto Firewalls without using a Panorama.

Here is a simple way to schedule an automated back up of Palo Alto firewalls without using a Panorama.

Follow the steps below :

  1. Open a Notepad and type the following :

    set dt=%date:~7,2%-%date:~4,2%-%date:~10,4%
    echo %dt%
    curl -kG “https://<Firewall ip>/api/?type=export&category=configuration&key=<api_key>” > D:\PaloAltoBackup\running-config_%dt%.xml

  2. Save the file as a batch file. (.bat)
  3. Create a task using windows interface :
    1.  Start Task Scheduler :a.  Open a command prompt. To open a command prompt, click Start , click All       Programs , click Accessories , and then click Command Prompt.
    b.  At the command prompt, type Taskschd.msc .
    TS-1
    2. Find and click the task folder in the console tree that you want to create the task        in. If you want to create the task in a new task folder, create the folder.

    3.  In the Actions Pane, click Create Task .
    TS-1
    4.  On the General tab of the Create Task dialog box, enter a name for the ta k. Fill        in or change any of the other properties on the General tab.
    TS-2
    5.  On the Triggers tab of the Create Task dialog box, click the New button to create a trigger for the task, and supply information about the trigger in the New Trigger dialog box.
    TS-3

    TS-4
    6.  On the Actions tab of the Create Task dialog box, click the New button to create an action for the task, and supply information about the action in the New Action dialog box. Under settings select the batch file that has been saved before.
    TS-5

    TS-6
    7.   Click the OK button on the Create Task dialog box.

  4. This is all that you need to do to get a scheduled config back up from the firewall (without using a panorama).

 

Leave a comment