Using NCM to backup PA firewall

jdoug

I want to use NCM 2020.02 to login and backup my PA firewall

Pan OS 9.1 hardware PA-3250 and have another in Azure.

I "inherited" this, so I am trying to use a PA connection profile.

my backup account has superuser ability. the interface allows ssh, snmp and https.

Yet, I can't get a login.  i can't see to find any doc out there that show how to setup NCM to download Palo alto config.

Please help this blind man see! 

stuartd

Hi @jdoug we don't have any 3250's here but we do have 3020 and 3050's which we backup.

You say you are trying to use a 'PA Connection Profile' which you inherited but have you tested it? Personally, if you aren't sure I'd just start afresh with a new profile. Use SSH Auto and select no enable login. Then check at the bottom of the page for the device template and set (or leave) it as Auto Determine. Now scroll back and click on the test button underneath the connection profile.

When (hopefully) that returns a green success bar, then change your device template to the built in PaloAlto template, click save and try a download. If you don't get a success, then change the template to PaloAlto and try another test.

If still failing, expand the show credential login details (underneath the success/failure bar), and see if there are any clues in there.