Palo Alto Snapshot Configuration

For PAN-OS, save a local backup snapshot of the candidate configuration if it contains changes that you want to preserve in the event the firewall reboots. 
These are changes you are not ready to commit, for example, changes you cannot finish in the current login session.

To overwrite the default snapshot file (.snapshot.xml) with all the changes that all administrators made, from the Web-Based Manager perform one of the following steps:

  1. Select “Device", "Setup", "Operations” and “Save” candidate configuration;

  2. Log in to the firewall with an administrative account that is assigned the Superuser role or an Admin Role profile with the "Save For Other Admins" privilege enabled; 

  3. Select “Config" and then "Save Changes” at the top of the web interface, and select “Save All Changes” and “Save”.

To create a snapshot that includes all the changes that all administrators made but without overwriting the default snapshot file:

  1. Select "Device", "Setup", "Operations", and "Save named configuration snapshot";

  2. Specify the name of a new or existing configuration file;

  3. Click "OK" and "Close".

To save only specific changes to the candidate configuration without overwriting any part of the default snapshot file:

  1. Log in to the firewall with an administrative account that has the role privileges required to save the desired changes;

  2. Select “Config" then "Save Changes” at the top of the web interface;

  3. Select "Save Changes Made By";

  4. To filter the "Save Scope by administrator", click <administrator-name>, select the administrators, and click "OK".

  5. To filter the "Save Scope by location", clear any locations that you want to exclude. 
    The locations can be specific virtual systems, shared policies and objects, or shared device and network settings.

  6. Click "Save", specify the name of a new or existing configuration file, and click "OK".

  • No labels