How to do Backup for Palo Alto Firewall using a Azure Function App

Question

How to do Backup for Palo Alto Firewall using a Azure Function App

Bala Suriya 0

1.My firewall is running in the azure vm , i need to backup it on daily using cron schedule, for these automation process i have used a Azure Function app - service and Timmer Trigger Template for the cron job.
2. From vs-code i have written the python script, the python script works well
3. When i try to deploy to azure function app from vs code to azure function portal.

VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-16T12:23:19.78+00:00

@Bala Suriya Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

Could you please help us with more information posting deploying your script to function app what is the issue you are experiencing?

Also, you have mentioned that your firewall is running inside a vm and you want to take a backup of it on schedule basis. if that is the case then you can create a new scheduled based policy by selecting the days from portal UI instead of passing CRON expression as shown in this document.

Hope this helps, let me know if you have any further questions on this.
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-17T06:50:39.1133333+00:00

@Bala Suriya Following up to see if you have a chance to check the previous response and helped. Do let us know if you have any further questions on this.
Bala Suriya 0 Reputation points

2024-12-18T05:41:15.15+00:00

@VenkateshDodda-MSFT
i have attached pdf
Bala Suriya 0 Reputation points

2024-12-18T05:57:28.6233333+00:00
@VenkateshDodda-MSFT
AZURE FUNCTION APP ERROR FACED:
In the Visual Studio Code

Installed the azure plugin, from vs code login to azure portal,

Create function app locally, when try to execute command from vscode used command (f5) to execute the function, the function work fine.

From local vscode to azureportal deploy to azure. am using a Timer Trigger template for scheduling job.

In the Azure Portal: 1. In the Function app 2. When I select the Timer Trigger function

Get Function URL is in hidden

Running my firewall in on-premises (because of these am getting error?)

All the process whici have followed is crt ? instead of using on-premesis, if i use vm-for firewall deployment it work fine?
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-19T08:58:12.53+00:00
@Bala Suriya Thanks for sharing more details.

Editing the Python functions from portal which are running on consumption Linux plan is not supported. Refer to this documentation also, Portal editing is enabled only for HTTP and Timer triggers for Functions on Linux using Premium and Dedicated plans for C# Script or Java Script (Node.js) languages.

Consumption app has default time out value of 5 minutes which is specifically to function executions. After the trigger starts function execution, the function needs to return/respond within the timeout duration. From the above screenshot we can see your function has retried Httprequest/HttpConnection multiple times and since no response it got timed out.

If you function takes more than 5 minutes to execute, I suggest you deploy your functions in either premium plan or dedicated app service plan. Refer to default function time out duration section.

Try troubleshooting your function by using the built-in detectors under diagnose and solve problems of your function's app.

Also, check whether you are able to reach your on-prem server and are there any firewall blockers.
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-23T03:40:06.5766667+00:00

@Bala Suriya Following up to see if you have a chance to check the previous response and helped. Do let me know if you have any further questions on this.

Your answer

VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-16T12:23:19.78+00:00

@Bala Suriya Thanks for posting your question in Microsoft Q&A, apologize for any inconvenience caused on this.

Could you please help us with more information posting deploying your script to function app what is the issue you are experiencing?

Also, you have mentioned that your firewall is running inside a vm and you want to take a backup of it on schedule basis. if that is the case then you can create a new scheduled based policy by selecting the days from portal UI instead of passing CRON expression as shown in this document.

Hope this helps, let me know if you have any further questions on this.
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-17T06:50:39.1133333+00:00

@Bala Suriya Following up to see if you have a chance to check the previous response and helped. Do let us know if you have any further questions on this.
Bala Suriya 0 Reputation points

2024-12-18T05:41:15.15+00:00

@VenkateshDodda-MSFT
i have attached pdf
Bala Suriya 0 Reputation points

2024-12-18T05:57:28.6233333+00:00

@VenkateshDodda-MSFT
AZURE FUNCTION APP ERROR FACED:
In the Visual Studio Code

Installed the azure plugin, from vs code login to azure portal,

Create function app locally, when try to execute command from vscode used command (f5) to execute the function, the function work fine.

From local vscode to azureportal deploy to azure. am using a Timer Trigger template for scheduling job.

In the Azure Portal: 1. In the Function app 2. When I select the Timer Trigger function

Get Function URL is in hidden

Running my firewall in on-premises (because of these am getting error?)

All the process whici have followed is crt ? instead of using on-premesis, if i use vm-for firewall deployment it work fine?
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-19T08:58:12.53+00:00

@Bala Suriya Thanks for sharing more details.

Editing the Python functions from portal which are running on consumption Linux plan is not supported. Refer to this documentation also, Portal editing is enabled only for HTTP and Timer triggers for Functions on Linux using Premium and Dedicated plans for C# Script or Java Script (Node.js) languages.

Consumption app has default time out value of 5 minutes which is specifically to function executions. After the trigger starts function execution, the function needs to return/respond within the timeout duration. From the above screenshot we can see your function has retried Httprequest/HttpConnection multiple times and since no response it got timed out.

If you function takes more than 5 minutes to execute, I suggest you deploy your functions in either premium plan or dedicated app service plan. Refer to default function time out duration section.

Try troubleshooting your function by using the built-in detectors under diagnose and solve problems of your function's app.

Also, check whether you are able to reach your on-prem server and are there any firewall blockers.
VenkateshDodda-MSFT 25,111 Reputation points Microsoft Employee Moderator

2024-12-23T03:40:06.5766667+00:00

@Bala Suriya Following up to see if you have a chance to check the previous response and helped. Do let me know if you have any further questions on this.

Share via

How to do Backup for Palo Alto Firewall using a Azure Function App

Your answer