Error when downloading Palo Alto Networks firewall configs

I have set up a nightly test config download job on one of our Palo Alto Network firewalls and I'm getting an error for both the running and startup configs:

ERROR: Cannot download Running config : Cannot enter Enable Level 0 : Unknown command: enable

ERROR: Cannot download Startup config : Cannot enter Enable Level 0 : Unknown command: enable

Our Global Device Defaults are set to have the Enable level at Enable as this is needed for Cisco devices, so I can't turn that off.

Is there a workaround for PA devices? I was told by our Network team that SolarWinds was never able to download PA configs, but I thought that was fixed in the latest releases of NCM. Am I wrong to think that?

I've been working with SW product for only a couple of months and took training for it last week, but we didn't cover this. :-)

Find more posts tagged with

palo alto

ncm

Accepted answers

amarnath_r

Even if the enable level is enabled, We can still download the configurations from Palo Alto. I have configured for one of my customers, But don't have the script.

you can give a try in Utility,

NCM 6.1 device template assistant utility

All comments

amarnath_r

Even if the enable level is enabled, We can still download the configurations from Palo Alto. I have configured for one of my customers, But don't have the script.

you can give a try in Utility,

NCM 6.1 device template assistant utility

sh27

Thank you, amarnath_r. This pointed me in the right direction. I actually found a device template for PA devices in NCM and after modifying it a bit was able to download the configs.

amarnath_r

@sh27 Glad it helped.. This utility is really helpful for new type of devices..