How to export configuration from Palo Alto Firewall Device
Palo Alto Firewall Device Guide
Using HTTP(S)
We would recommend using HTTPS rather than HTTP for transferring your devices configuration as the latter provides no encryption. The procedure for getting the configuration from the device using HTTP(S) is as follows:
-
Using your favorite web browser, connect to the HTTP(S) service provided by your Palo Alto device for remote management. You can do this by entering "https://" (recommended) or "http://" followed by your devices IP address.
-
Logon using your administration username and password.

-
Click the Device tab and then the Operations tab.

-
Click Export named configuration snapshot and then choose the configuration that you would like to export. Unless you wish to audit a specific configuration we recommend exporting the ".merged_running_config.xml" for auditing purposes.

-
Finally click Ok to save your device configuration.