This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Palo Alto Backup Comapre, generates differences and TFTP backup issue.

twin--turbo over 6 years ago

using the standard backup command in CATTOOLS we get the "SET" style backup. This seems to report the backup being different some times.

I am trying to do full XML backups instead using TFTP, but despite being reported as compatible with TFTP backup in HELP, the job says

"no default commands available for this device"

If I enter the palo alto command

"tftp export configuration from running-config.xml to 192.168.1.1"

It errors on requiring "%ctDeviceName" Variable.

but there is no variable for the output file name in the Palo Alto command..

Seems Palo is not supported correctly after all?

0 twin--turbo over 6 years ago

Tumble weed rolls past....
I have seen in the debug data that the firewall is placed in "SET" config mode by cat tools.
How do I stop this so it outputs XML???
Cancel
Vote Up 0 Vote Down

Cancel
0 twin--turbo over 6 years ago in reply to twin--turbo

How Can I get the XML backup?????
Cancel
Vote Up 0 Vote Down

Cancel
0 bkyle over 6 years ago

Have you tried using the Device.CLI.Modify Config activity:
http://www.kiwisyslog.com/help/cattools/index.html?act_devclimodifycfg.htm
Cancel
Vote Up 0 Vote Down

Cancel
0 twin--turbo over 6 years ago in reply to bkyle

The backup job seems to FORCE "Set" mode,
I tried using variations to put it in "XML" mode , but these get overridden.
TT
Cancel
Vote Up 0 Vote Down

Cancel
0 twin--turbo over 6 years ago in reply to twin--turbo

We getting loads of incorrect config change notifications.
When we look at the report, there is parts of words missing in what has been backed up in the file.
set shared log-settings config match-list config-any send-email
set shared log-settings config match-list config-any send-syslog
set shared log-settings con network network-profiles qos-profile read-only
Not good!
Cancel
Vote Up 0 Vote Down

Cancel
0 twin--turbo over 6 years ago in reply to twin--turbo

Well I am giving up on CAT TOOLS ( at least for PALO).
Impressed with " Opamnager NCM " does a nice job of backing up the palo alto
Cancel
Vote Up 0 Vote Down

Cancel
0 hepvd over 3 years ago in reply to twin--turbo

Hi,
Anyone know how to backup this Palo Alto FW with Kiwi Cat and get a correct XML file ?
Thanks
Cancel
Vote Up 0 Vote Down

Cancel