Try a different search term or clear the filter.
clear {application-signature | audit-comment | global-protect | global-protect-portal | nat-rule-cache | plugins | policy-app-usage-data | rule-hit-count | snmpd | ssl-cert-cn | statistics}
clear application-signature
Clear application-signature statistics
clear audit-comment
Clear audit comment for an xpath
clear global-protect
clear option for GlobalProtect
clear global-protect-portal
clear gloabl protect portal stats
clear nat-rule-cache
Clear specified dynamic-ip NAT rule ippool cache
clear plugins
Clear plugin related data
clear policy-app-usage-data
Clear Policy App Usage Data
clear rule-hit-count
Clear policy rule hit-count information
clear snmpd
Clear options for snmpd daemon
clear ssl-cert-cn
Clear ssl common name cache
clear statistics
Clear statistics
clear advanced-routing bgp
clear advanced-routing bgp
clear BGP counters
clear advanced-routing bfd {counters | session-state}
clear advanced-routing bfd counters
clear BFD Tx, RX, and Drop counters
clear advanced-routing bfd session-state
clear BFD session state
clear advanced-routing multicast {igmp | msdp}
clear advanced-routing multicast mroute
clear multicast mroute
clear advanced-routing multicast pim
clear PIM counters
clear arp interface {all}
| Parameter | Description |
|---|---|
<value> |
Interface name |
clear auto-tag {ip <ip/netmask> | user <value> | users <value>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
<value> |
User name |
clear auto-tag ip <ip/netmask>
Dot format IP address
clear auto-tag user <value>
User name
clear auto-tag users <value>
User list
clear cluster-flow {all | id <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Clear specific cluster flow |
clear cluster-flow all
Clear all cluster-flows
clear cluster-flow id <value>
Clear specific cluster flow
clear counter {all | interface}
clear counter all
Clear all counters
clear counter interface
Clear all interface counters
clear counter global {name}
clear counter global filter
Apply counter filters
clear device-cache-mp {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
clear device-cache-mp all
Clear all ip to device cache in management plane
clear device-cache-mp ip <ip/netmask>
Clear the specified ip to device cache in management plane
clear dhcp
clear dhcp lease {all | interface <value>}
| Parameter | Description |
|---|---|
<value> |
interface name |
clear dhcp lease all
Clear leases on all interfaces
clear dhcp lease interface <value>
Clear leases on one or all interfaces
clear dns-proxy
clear dns-proxy cache {all | name <name>}
| Parameter | Description |
|---|---|
<name> |
<name> |
clear dns-proxy cache all
Clear all DNS Proxy caches
clear dns-proxy cache name <name>
DNS Proxy object name
clear dns-proxy dns-signature {cache | counters}
clear dns-proxy dns-signature cache
cache
clear dns-proxy dns-signature counters
counters
clear dns-proxy statistics {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
clear dns-proxy statistics all
Clear all DNS Proxy statistics
clear dns-proxy statistics name <value>
DNS Proxy object name
clear dos-protection {rule <name> | zone <name>}
| Parameter | Description |
|---|---|
<name> |
<name> |
clear dos-protection rule <name>
DoS protection rule name
clear dos-protection zone <name>
Source zone name
clear fwd-cache {all | id <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Invalidate forwarding cache of a specific session |
clear fwd-cache all
Invalidate forwarding cache of all sessions
clear fwd-cache id <value>
Invalidate forwarding cache of a specific session
clear high-availability {cluster | control-link | transitions}
clear high-availability cluster
Clear high-availability cluster information
clear high-availability control-link
Clear high-availability control-link information
clear high-availability transitions
Clear high-availability transition statistics
clear job id <value>
| Parameter | Description |
|---|---|
<value> |
<0-4294967295> |
clear job id <value>
id
clear lldp counters {all | interface <value>}
| Parameter | Description |
|---|---|
<value> |
Clear counters on one or all interfaces |
clear lldp counters all
Clear counters on all interfaces
clear lldp counters interface <value>
Clear counters on one or all interfaces
clear log {acc | alarm | auth | config | decryption | globalprotect | gtp | hipmatch | iptag | sctp | system | threat | trace | traffic | userid}
clear log acc
ACC database
clear log alarm
Alarm logs
clear log auth
Authentication logs
clear log config
Configuration logs
clear log decryption
Decryption logs
clear log globalprotect
GlobalProtect logs
clear log gtp
Tunnel and GTP logs
clear log hipmatch
Hipmatch database
clear log iptag
Iptag logs
clear log sctp
SCTP logs
clear log system
System logs
clear log threat
Threat logs
clear log trace
Trace logs
clear log traffic
Traffic logs
clear log userid
User-ID logs
clear logrcvr offline-logpurger {interval | percentage-threshold}
clear logrcvr offline-logpurger interval
Clear interval period for offline purger
clear logrcvr offline-logpurger percentage-threshold
Clear percentage threshold for offline purger
clear mac {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<dot1q-vlan> Clear specific vlan mac information |
clear mac all
Clear all mac information
clear neighbor
clear neighbor interface {all}
| Parameter | Description |
|---|---|
<value> |
Interface name |
clear neighbor ndp-monitor {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<interface_name> Clear specific interface ndp monitor cache entries |
clear neighbor ndp-monitor all
all
clear net-inspection filter
clear net-inspection filter
Net-inspection filter count
clear nft-dp-distribution stats
clear nft-dp-distribution stats
Clear nft dp-distribution
clear pbf return-mac {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
name value |
clear pbf return-mac all
Clear all PBF return mac
clear pbf return-mac name <value>
name
clear pbf rule {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
name value |
clear pbf rule all
all PBF rules
clear pbf rule name <value>
name
clear pppoe {interface <value> | ipv6}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
clear pppoe interface <value>
clear pppoe connection for interface
clear pppoe ipv6
Clear PPPoE IPv6 Client details
clear query {all-by-session | id <value>}
| Parameter | Description |
|---|---|
<value> |
<0-4294967295> |
clear query all-by-session
All queries for this session
clear query id <value>
id
clear report {all-by-session | cache | id <value>}
| Parameter | Description |
|---|---|
<value> |
<0-4294967295> |
clear report all-by-session
All reports for this session
clear report cache
All report caches
clear report id <value>
id
clear resiliency statistics
clear resiliency statistics
Clear session resiliency statistics
clear routing bgp
clear routing bgp
clear BGP counters
clear routing bfd {counters | session-state}
clear routing bfd counters
clear BFD Tx, RX, and Drop counters
clear routing bfd session-state
clear BFD session state
clear routing multicast {igmp | pim}
clear routing multicast igmp
clear IGMP counters
clear routing multicast pim
clear PIM counters
clear sdwan event
clear sdwan event
SD-WAN related events
clear sdwan pool unsuccess
clear sdwan pool unsuccess
unsuccessful packet counts
clear session {all | id <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Clear specific session |
clear session all
Clear all sessions
clear session id <value>
Clear specific session
clear ssl-decrypt exclude-cache
clear ssl-decrypt exclude-cache
Clear all exclude cache in dataplane
clear uappid-filtergroup-mapping {all | id <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Clear the specified UAppID in data plane |
clear uappid-filtergroup-mapping all
Clear all UAppIds in cache in data plane
clear uappid-filtergroup-mapping id <value>
Clear the specified UAppID in data plane
clear uappid-policy-cache {all | id <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Clear the specified UAppID in data plane |
clear uappid-policy-cache all
Clear all UAppIds in cache in data plane
clear uappid-policy-cache id <value>
Clear the specified UAppID in data plane
clear ueip {address <ip> | all}
| Parameter | Description |
|---|---|
<ip> |
<ip> |
clear ueip address <ip>
UEIP
clear ueip all
clear all UEIP entries
clear uid-cache {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-2147483647> Clear the specified user cache in data plane |
clear uid-cache all
Clear all user cache in data plane
clear uid-cache uid <value>
Clear the specified user cache in data plane
clear uid-map-cache {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-2147483647> Clear the specified uid mapping cache in data plane |
clear uid-map-cache all
Clear all uid map cache in data plane
clear uid-map-cache uid <value>
Clear the specified uid mapping cache in data plane
clear url-cache {all | url <value>}
| Parameter | Description |
|---|---|
<value> |
Clear the specified URL from data plane |
clear url-cache all
Clear all URLS in data plane
clear url-cache url <value>
Clear the specified URL from data plane
clear user-cache {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
clear user-cache all
Clear all ip to user cache in data plane
clear user-cache ip <ip/netmask>
Clear the specified ip to user cache in data plane
clear user-cache-mp {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
clear user-cache-mp all
Clear all ip to user cache in management plane
clear user-cache-mp ip <ip/netmask>
Clear the specified ip to user cache in management plane
clear user-policy-cache {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-2147483647> Clear the specified user-policy cache in data plane |
clear user-policy-cache all
Clear all user-policy cache in data plane
clear user-policy-cache uid <value>
Clear the specified user-policy cache in data plane
clear vpn {flow | ike-hashurl | ike-preferred-version | ike-sa | ipsec-sa}
clear vpn flow
Clear VPN tunnel on dataplane
clear vpn ike-hashurl
clear all certifacate entities from cert cache
clear vpn ike-preferred-version
remove saved IKE preferred version
clear vpn ike-sa
remove active IKE SA and abort all ongoing key negotiations
clear vpn ipsec-sa
deactivate IPSec SA
clear wildfire counters
clear wildfire counters
clear wildfire statistics counters
clear xml-api
clear xml-api multiusersystem {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
clear xml-api multiusersystem all
Clear all XML based TS Agents
clear xml-api multiusersystem ip <ip/netmask>
Clear specified XML TS Agent identified through an ip
clear zone-protection zone <name>
| Parameter | Description |
|---|---|
<name> |
<name> |
clear zone-protection zone <name>
zone name
configure
debug {list-admin-history | list-blocked-partial-xpaths | logdb-usage | logview}
debug list-admin-history
Show admin history for xpaths in journal
debug list-blocked-partial-xpaths
Show blocked xpaths
debug logdb-usage
Report logdb usage
debug logview
debug logview
debug advanced-routing {cluster | dynamic-routes | fqdn | ifmon | path-monitor | socket}
debug advanced-routing cluster
show cluster runtime status
debug advanced-routing dynamic-routes
show dynamic routes from satellites
debug advanced-routing fqdn
debug fqdn mapping
debug advanced-routing ifmon
show interface monitor status
debug advanced-routing path-monitor
debug route path-monitor
debug advanced-routing socket
socket
debug advanced-routing bfd {on}
debug advanced-routing bfd off
off
debug advanced-routing bfd show
show
debug advanced-routing bgp {updates}
debug advanced-routing bgp bfd
bfd
debug advanced-routing bgp graceful-restart
graceful-restart
debug advanced-routing bgp keepalives
keepalives
debug advanced-routing bgp neighbor-events
neighbor-events
debug advanced-routing bgp nht
nht
debug advanced-routing bgp zebra
zebra
debug advanced-routing fib {check | clear | flush | stats}
debug advanced-routing fib check
Show fib check status
debug advanced-routing fib clear
clear fib counters
debug advanced-routing fib flush
force forwarding table sync
debug advanced-routing fib stats
show route message stats
debug advanced-routing global {on}
debug advanced-routing global off
off
debug advanced-routing global show
show
debug advanced-routing mpf {offload}
debug advanced-routing mpf stats
show multicast packet forwarder stats
debug advanced-routing multicast {on}
debug advanced-routing multicast off
off
debug advanced-routing multicast show
show
debug advanced-routing ospf {on}
debug advanced-routing ospf off
off
debug advanced-routing ospf show
show
debug advanced-routing ospfv3 {on}
debug advanced-routing ospfv3 off
off
debug advanced-routing ospfv3 show
show
debug advanced-routing other {on}
debug advanced-routing other off
off
debug advanced-routing other show
show
debug advanced-routing pcap {all | bgp | igmp | msdp | ospf | ospfv3 | pim}
debug advanced-routing pcap show
show
debug advanced-routing qtrace {disable | enable | flush-log | show}
debug advanced-routing qtrace disable
disable routed quick tracing
debug advanced-routing qtrace enable
enable routed quick tracing
debug advanced-routing qtrace flush-log
Flush buffered quick trace log to log file
debug advanced-routing qtrace show
Show routed quick tracing
debug advanced-routing restart {bgp | ospf | ospfv3 | pim | rip}
debug advanced-routing restart bgp
restart bgp process
debug advanced-routing restart ospf
restart ospf process
debug advanced-routing restart ospfv3
restart ospfv3 process
debug advanced-routing restart pim
restart pim process
debug advanced-routing restart rip
restart rip process
debug advanced-routing rip {on}
debug advanced-routing rip off
off
debug advanced-routing rip show
show
debug advanced-routing static {on}
debug advanced-routing static off
off
debug advanced-routing static show
show
debug advanced-routing zebra {packet}
debug advanced-routing zebra events
Debug option set for events
debug advanced-routing zebra fpm
Debug option set for fpm
debug advanced-routing zebra kernel
Debug option set for zebra between kernel interface
debug advanced-routing zebra nht
Debug option set for nht
debug advanced-routing zebra rib
Debug option set for rib
debug authentication {api-key-show | clear-tacacs-acct-stats | connection-debug-off | connection-debug-on | connection-show | off | set-tacacs-acct-task-q-size | show | show-active-requests | show-pending-requests | show-tacacs-acct-stats | test-tacacs-acct-server-connection}
debug authentication api-key-show
Show the content and validaty of the API key
debug authentication clear-tacacs-acct-stats
Clear TACACS+ acct stats
debug authentication connection-debug-off
Disable debug on connection for a specific type or a connection id or all
debug authentication connection-debug-on
Enable debug on connection for a specific type or a connection id or all
debug authentication connection-show
Show connection for a specific type or a connection id or all
debug authentication off
Turn off debug logging
debug authentication set-tacacs-acct-task-q-size
Set TACACS+ acct task queue size...requires authd restart after change to make it effective
debug authentication show
Display current debug logging setting
debug authentication show-active-requests
Show active auth request
debug authentication show-pending-requests
Show pending auth request
debug authentication show-tacacs-acct-stats
Show TACACS+ acct stats
debug authentication test-tacacs-acct-server-connection
Test TACACS+ acct server connectivty
debug authentication on {debug | dump | error | info | warn}
debug authentication on debug
Only output error, warning, info and debug logs
debug authentication on dump
Output all logs
debug authentication on error
Only output error logs
debug authentication on info
Only output error, warning and info logs
debug authentication on warn
Only output error and warning logs
debug bfd global {on}
debug bfd global off
off
debug bfd global show
show
debug cli {detail | exclude-completion | include-completion | off | on | show | timestamp}
debug cli detail
detail
debug cli exclude-completion
exclude-completion
debug cli include-completion
include-completion
debug cli off
off
debug cli on
on
debug cli show
show
debug cli timestamp
timestamp
debug cloud-appid ace-server <value>
| Parameter | Description |
|---|---|
<value> |
specify server address |
debug cloud-appid ace-server <value>
temporarily set ACE cloud server
debug cloud-appid cloud-manual-pull {application <value> | check-cloud-app-data | check-cloud-signatures | cookie-base64 <value> | cookie-base64-and-store <value> | generate-cookie <value> | signature-appid <value> | signature-id <value>}
| Parameter | Description |
|---|---|
<value> |
cloud application id |
debug cloud-appid cloud-manual-pull application <value>
cloud application id
debug cloud-appid cloud-manual-pull check-cloud-app-data
check and restore cloud-app data from cloud server
debug cloud-appid cloud-manual-pull check-cloud-signatures
check and restore signatures from cloud server
debug cloud-appid cloud-manual-pull cookie-base64 <value>
fetch cloud data with specific cookie
debug cloud-appid cloud-manual-pull cookie-base64-and-store <value>
fetch cloud data and store locally
debug cloud-appid cloud-manual-pull generate-cookie <value>
generate cookie in base64 format
debug cloud-appid cloud-manual-pull signature-appid <value>
cloud application id
debug cloud-appid cloud-manual-pull signature-id <value>
cloud application/threat/filter signature id
debug cloud-appid delete-signature-data {app-name <value> | appid <value> | filter-signature-id <value>}
| Parameter | Description |
|---|---|
<value> |
cloud application name |
debug cloud-appid delete-signature-data app-name <value>
cloud application name
debug cloud-appid delete-signature-data appid <value>
cloud application id
debug cloud-appid delete-signature-data filter-signature-id <value>
cloud filter signature id
debug cloud-appid dump config
debug cloud-appid dump config
cloud app internal config on firewall
debug cloud-appid keep-task-file {no | yes}
debug cloud-appid keep-task-file no
remove all task files
debug cloud-appid keep-task-file yes
keep task files for a week(default)
debug cloud-appid reset {cloud-app-data | connection-to-cloud | force-cad-rebuild | force-data-integrity-check | force-memory-gc | pending-request-dp | reload-cloud-data | signature-dp | task-record}
debug cloud-appid reset cloud-app-data
remove all cloud application data, including application, container and metadata
debug cloud-appid reset connection-to-cloud
reset connection to cloud app server
debug cloud-appid reset force-cad-rebuild
force devsrvr to rebuild tdb for cloud app signatures
debug cloud-appid reset force-data-integrity-check
check cloud data integrity
debug cloud-appid reset force-memory-gc
trigger memory garbage collector to release unused memory
debug cloud-appid reset pending-request-dp
remove all signature requests
debug cloud-appid reset reload-cloud-data
reload cloud-app data from disk files
debug cloud-appid reset signature-dp
remove all cloud signatures
debug cloud-appid reset task-record
remove all historic task info in memory
debug cloud-appid set config <value>
| Parameter | Description |
|---|---|
<value> |
config in json format |
debug cloud-appid set config <value>
cloud internal config
debug cloud-appid unknown-signature-query {app-name <value> | appid <value> | filter-sig-id <value>}
| Parameter | Description |
|---|---|
<value> |
cloud application name |
debug cloud-appid unknown-signature-query app-name <value>
cloud application name
debug cloud-appid unknown-signature-query appid <value>
cloud application id
debug cloud-appid unknown-signature-query filter-sig-id <value>
cloud filter signature id
debug cloud-userid {reset-connection | reset-counters}
debug cloud-userid reset-connection
Reset connection to the cloud
debug cloud-userid reset-counters
Reset cloud user-id counters
debug cluster-userid reset-counters
debug cluster-userid reset-counters
Reset cluster user-id counters
debug contentd status
debug contentd status
show content manager status
debug cryptod clear hsm-key-cache
debug cryptod clear hsm-key-cache
Clear hsm key cache for ssl keys
debug cryptod global {on}
debug cryptod global off
off
debug cryptod global show
show
debug cryptod show {hsm-thread}
debug cryptod show counters
Cryptod counters
debug dataplane flush-log
debug dataplane flush-log
Flush buffered debug log to log file
debug dataplane appinfo clear
debug dataplane appinfo clear
clear all appinfo2ip entries
debug dataplane cloud-appid {lookup | reset | set | show}
debug dataplane ctd-agent {clear | config | global | reset | session | set}
debug dataplane ctd-agent device-cert
show if device cert is available
debug dataplane ctd-agent license
show if DLP license valid
debug dataplane flow-control {disable | enable}
debug dataplane flow-control disable
Disable flow control
debug dataplane flow-control enable
Enable flow control
debug dataplane fpga {set}
debug dataplane fpga state
Show fpga state
debug dataplane gtp {drop}
debug dataplane internal {pdt | vif}
debug dataplane memory status
debug dataplane memory status
Show shared memory allocation status
debug dataplane mica {reset | set | show}
debug dataplane mmdbg {leakiller | obj-trace | pool-debug | watchpoint}
debug dataplane mmdbg status
get mmdbg configuration status
debug dataplane monitor {detail}
debug dataplane nat {static-mapping}
debug dataplane nat sync-ippool
sync-ippool
debug dataplane netflow {clear | statistics}
debug dataplane netflow clear
Clear NetFlow statistics
debug dataplane netflow statistics
Show NetFlow statistics
debug dataplane oprofile {opcontrol | opreport}
debug dataplane packet-diag {clear | set | show}
debug dataplane packet-diag aggregate-logs
Aggregate packetdiag log
debug dataplane policy {cache-usage-threshold <value> | switch-cache}
| Parameter | Description |
|---|---|
<value> |
<50-100> Set policy cache usage threshold |
debug dataplane policy cache-usage-threshold <value>
Set policy cache usage threshold
debug dataplane policy switch-cache
Switch data plane policy cache
debug dataplane pool {check | elastic | memseg | set | show}
debug dataplane pool mem
Dump memory to a file
debug dataplane pool reset-max-usage
reset max usage count for all buffer pools
debug dataplane pool statistics
Show buffer pools statistics
debug dataplane pow {performance | status}
debug dataplane pow dpdk-stats
Show DPDK NIC stats
debug dataplane process {cmd | comm | dssd | escd | grpcd | ha-agent | mprelay | task}
debug dataplane pvst {sys-id-ext-rewrite}
debug dataplane reset {appid | ctd | dns-cache | dos | ml-block-cache | ssl-decrypt}
debug dataplane reset global-id-map
clear DP global ID map
debug dataplane reset logging
Reset data plane logging settings
debug dataplane reset ml-form-cache
clear DP MLAV form cache
debug dataplane reset ml-lookup-cache
clear DP MLAV lookup cache
debug dataplane reset pow
Reset pow performance stats
debug dataplane reset username-cache
clear DP user id to name cache
debug dataplane sctp {drop | dump | fast-sack}
debug dataplane set {ctd | ip4-ignore-df | ip6-host-defrag | ip6-host-pmtu-exception-check | ip6-mcast-fwd-check | ip6-routing-hdr-check | ip6-ucast-mac-check | jumboframe-buffer-adjustment | pbf-no-return-mac-learning | qos-setting | ssl-decrypt | tunnel-inner-checksum-validation}
debug dataplane set blocked-forward
Set wildfire blocked-forward settings
debug dataplane show {cfg-memstat | ctd | dns-cache | dos | fwd-cache | gtp | http2 | memory-pool | qos-param | ssl-decrypt}
debug dataplane show app-filter-policy
show DP app filter id to rule cache
debug dataplane show app-group-policy
show DP app group id to rule cache
debug dataplane show com
Debug COM message
debug dataplane show cookie-surrogate-cache
Show DP cookie surrogate cache
debug dataplane show dp-user-cache
Show user-cache statistics
debug dataplane show enhanced-application-logging
show DP enhanced-application-logging statistics
debug dataplane show no-sess-owner-query-limit
Show no owner query limit for forward sessions
debug dataplane show uappid-filtergroup-mapping
Show UAppIds DP Cache
debug dataplane show uappid-in-policy
Show UAppIds configured in policy
debug dataplane show uappid-policy-cache
Show UAppIds policy cache
debug dataplane show unknown-uappid-cache
Show unknown UAppIds in DP
debug dataplane show url-cache
Show url-cache statistics
debug dataplane show username-cache
show DP user id to name cache
debug dataplane task-heartbeat {off | on | show}
debug dataplane task-heartbeat off
off
debug dataplane task-heartbeat on
on
debug dataplane task-heartbeat show
Display current debug setting
debug dataplane task-queue dump
debug dataplane task-queue dump
Show task queue mapping
debug dataplane tasks {start | stop}
debug dataplane tasks start
Start all pan_tasks
debug dataplane tasks stop
Stop all pan_tasks
debug dataplane tcp state
debug dataplane tcp state
Show tcp configuration state
debug dataplane test {uappid-filtergroup-mapping}
| Parameter | Description |
|---|---|
<value> |
Tests the URL resolution process triggered by a DP thread |
debug dataplane test dump-nw-id-ebl-tble
Dump the nw id table on the DP for EDL
debug dataplane test dump-nw-id-vsys-tble
Dump the nw id table on the DP for vsys
debug dataplane test nat-policy-add
Test nat policy translate
debug dataplane test nat-policy-del
Test nat policy delete
debug dataplane test nw-id-lookup
Lookup and dump the rules for the given IMSI/IMEI/NSSAI
debug dataplane test tunnel-tables
Performs sensibility checks on the internal tunnel tables to identify corruption
debug dataplane test uappid-policy-cache
uappid-policy-cache
debug dataplane test url <value>
Tests the URL resolution process triggered by a DP thread
debug dataplane test url-bloom <value>
Tests the URL is hit the URL bloom by a DP thread
debug dataplane test url-from-file
Tests the URL resolution process triggered by a DP for list of URLs
debug device-server {clear | off | show}
debug device-server clear
Clear all debug logs
debug device-server off
Turn off debug logging
debug device-server show
Display current debug logging setting
debug device-server app-depedency-check-disable {off | on | show}
debug device-server app-depedency-check-disable off
off
debug device-server app-depedency-check-disable on
on
debug device-server app-depedency-check-disable show
show
debug device-server cp-allow-encrypted-disable {off | on | show}
debug device-server cp-allow-encrypted-disable off
off
debug device-server cp-allow-encrypted-disable on
on
debug device-server cp-allow-encrypted-disable show
show
debug device-server cp-deny-non-tcp {off | on | show}
debug device-server cp-deny-non-tcp off
Allow non TCP if not authenticated
debug device-server cp-deny-non-tcp on
Deny non TCP if not authenticated
debug device-server cp-deny-non-tcp show
show
debug device-server cp-deny-tcp {off | on | show}
debug device-server cp-deny-tcp off
Allow TCP if not authenticated
debug device-server cp-deny-tcp on
Deny TCP if not authenticated
debug device-server cp-deny-tcp show
show
debug device-server dump {app-containers | app-filters | app-groups | apps | com | dynamic-address-group | fqdn | idmgr | memory | regips}
debug device-server dump logging
Dump logging statistics
debug device-server dump ml7-idblob-flatbuf
Dump ml7 id blob flatbuf read statistics
debug device-server dump pan-url-db
pan-url-db
debug device-server dump tag-table
tag-table
debug device-server enable-ml7-commit {off | on | show}
debug device-server enable-ml7-commit off
off
debug device-server enable-ml7-commit on
on
debug device-server enable-ml7-commit show
show
debug device-server mlav {set-cloud-url}
debug device-server mlav clear-cache
Clear MLAV MP cache
debug device-server mlav revert-model
Revert to previous machine learning model
debug device-server on {debug | dump | error | info | warn}
debug device-server on debug
Only output error, warning, info and debug logs
debug device-server on dump
Output all logs
debug device-server on error
Only output error logs
debug device-server on info
Only output error, warning and info logs
debug device-server on warn
Only output error and warning logs
debug device-server pan-url-db {cloud-reelect | db-backup | db-info | db-perf | show-stats | test-seedurl}
debug device-server pan-url-db cloud-reelect
Reelect the URL cloud
debug device-server pan-url-db db-backup
duration to backup url db
debug device-server pan-url-db db-info
Show DB info
debug device-server pan-url-db db-perf
Show host trie performance
debug device-server pan-url-db show-stats
Show URL DB access statistics
debug device-server pan-url-db test-seedurl
Test seed URLs from cloud
debug device-server pcap {virtual-router}
debug device-server pcap delete
delete
debug device-server pcap off
off
debug device-server pcap show
show
debug device-server pcap view
view
debug device-server reset {com | config | id-manager | logging}
debug device-server reset com
clear com messages statistics
debug device-server reset config
Clear last config object
debug device-server reset id-manager
Clear id manager cache file
debug device-server reset logging
Clear logging statistics
debug device-server set {base | config | misc | mlav | tdb | third-party | url | url_trie | wfrt}
debug device-server set all
all
debug device-server shadow-rule-check-disable {off | on | show}
debug device-server shadow-rule-check-disable off
off
debug device-server shadow-rule-check-disable on
on
debug device-server shadow-rule-check-disable show
show
debug device-server test {admin-override-password <value> | botnet-domain | dynamic-url | idmgr-change-max | idmgr-restore-default-max | ml7-blob | nw_id | url-category <value>}
| Parameter | Description |
|---|---|
<value> |
Test url admin override password |
debug device-server test admin-override-password <value>
Test url admin override password
debug device-server test botnet-domain
Test batch botnet domain categorization
debug device-server test dynamic-url
Test batch dynamic URL categorization
debug device-server test idmgr-change-max
Test idmgr change max id
debug device-server test idmgr-restore-default-max
Test idmgr restore default max id
debug device-server test ml7-blob
Test ml7 blob for correctness
debug device-server test nw_id
show-table, ser-tble, unser-tbl
debug device-server test url-category <value>
Get URL categorization from code
debug device-server trigger AddrObjRefresh
debug device-server trigger AddrObjRefresh
Devsrvr only AddrObjRefresh commit
debug device-server unset {base | config | misc | mlav | tdb | third-party | url | url_trie | wfrt}
debug device-server unset all
all
debug device-telemetry {off | on | refresh-dest-server}
debug device-telemetry off
Debug off
debug device-telemetry on
Debug on
debug device-telemetry refresh-dest-server
Reset the dest-server node
debug dhcpd cluster
debug dhcpd cluster
show cluster runtime status
debug dhcpd downgrade convert-db
debug dhcpd downgrade convert-db
Convert DB File for previous version
debug dhcpd global {on}
debug dhcpd global off
off
debug dhcpd global show
show
debug dhcpd high-availability {ignore-config-sync}
debug dhcpd pcap {virtual-router}
debug dhcpd pcap delete
delete
debug dhcpd pcap off
off
debug dhcpd pcap show
show
debug dhcpd pcap view
view
debug dhcpd show objects
debug dhcpd show objects
DHCP client interface FSM
debug distributord {off | show}
debug distributord off
off
debug distributord show
show
debug distributord dump {relay-ipc-iotd | relay-ipc-useridd}
debug distributord dump relay
Dump relay data struct
debug distributord hip-relay {hip-report-dedup-cache-size | hip-report-in-cache-aging-interval}
debug distributord hip-relay reset-hip-report-dedup-cache
reset hip report dedup cache
debug distributord max-handle-concurrent-clients {set <value> | show}
| Parameter | Description |
|---|---|
<value> |
<1-64> Set size of token bucket for getall requests |
debug distributord max-handle-concurrent-clients set <value>
Set size of token bucket for getall requests
debug distributord max-handle-concurrent-clients show
Show size of token bucket for getall requests
debug distributord on {debug | dump | error | info | warn}
debug distributord on debug
debug
debug distributord on dump
dump
debug distributord on error
error
debug distributord on info
info
debug distributord on warn
warn
debug distributord redis-connection-pool {ip-user | other-data-types}
debug distributord relay {relay-ipc-iotd | relay-ipc-useridd | relay-mode}
debug distributord reset {redistribution-agent}
debug distributord reset relay-statistics
relay-statistics
debug distributord set {agent | client | distribute | relay}
debug distributord test debug-log-category
debug distributord test debug-log-category
test on debug log category
debug distributord unset {agent | client | distribute | relay}
debug dnsproxyd clear {cache-statistics | fqdn | sys-stats}
debug dnsproxyd clear cache-statistics
Clear DNS Proxy cache statistics
debug dnsproxyd clear fqdn
Clear DNS Proxy FQDN
debug dnsproxyd clear sys-stats
Clear system DNS Proxy statistics
debug dnsproxyd disable-implicit-tail-match {no | yes}
debug dnsproxyd disable-implicit-tail-match no
enable
debug dnsproxyd disable-implicit-tail-match yes
disable
debug dnsproxyd disable-per-vsys {no | yes}
debug dnsproxyd disable-per-vsys no
enable
debug dnsproxyd disable-per-vsys yes
disable
debug dnsproxyd dns-signature {query_n | response_n | ut}
debug dnsproxyd dns-signature allow-list
Allow List
debug dnsproxyd dns-signature cache
cache
debug dnsproxyd dns-signature counters
counters
debug dnsproxyd dns-signature info
info
debug dnsproxyd dns-signature query
query
debug dnsproxyd dns-signature response
response
debug dnsproxyd dns-signature threat-info
threat-info
debug dnsproxyd enable-preserve-tsig-ttl {no | yes}
debug dnsproxyd enable-preserve-tsig-ttl no
disable
debug dnsproxyd enable-preserve-tsig-ttl yes
enable
debug dnsproxyd fqdn {counters | dump}
debug dnsproxyd fqdn counters
DNS Proxy FQDN counters
debug dnsproxyd fqdn dump
DNS Proxy FQDN state
debug dnsproxyd global {on}
debug dnsproxyd global off
off
debug dnsproxyd global show
show
debug dnsproxyd rcode-failover {no | yes}
debug dnsproxyd rcode-failover no
disable
debug dnsproxyd rcode-failover yes
enable
debug dnsproxyd show {batches | cache-statistics | connections | objects | persistent | sys-statistics}
debug dnsproxyd show batches
DNS Proxy batch requests
debug dnsproxyd show cache-statistics
DNS Proxy cache statistics
debug dnsproxyd show connections
DNS Proxy connections
debug dnsproxyd show objects
DNS Proxy object debug
debug dnsproxyd show persistent
DNS Proxy persistent cache entries on disk
debug dnsproxyd show sys-statistics
DNS Proxy system statistics
debug evtmgr
debug evtmgr configd {show}
debug evtmgr configd debug-log
Enable debug for a feature
debug evtmgr configd msg-filter
Specify message debug fitler
debug evtmgr cord {show}
debug evtmgr cord debug-log
Enable debug for a feature
debug evtmgr cord msg-filter
Specify message debug fitler
debug evtmgr logrcvr {show}
debug evtmgr logrcvr debug-log
Enable debug for a feature
debug evtmgr logrcvr msg-filter
Specify message debug fitler
debug evtmgr ms {authz | authz-allowed-log | authz-bypassed-log | authz-dropped-log | show | syslog-enabled}
debug evtmgr ms debug-log
Enable debug for a feature
debug evtmgr ms msg-filter
Specify message debug fitler
debug evtmgr reportd {show}
debug evtmgr reportd debug-log
Enable debug for a feature
debug evtmgr reportd msg-filter
Specify message debug fitler
debug evtmgr useridd {show}
debug evtmgr useridd debug-log
Enable debug for a feature
debug evtmgr useridd msg-filter
Specify message debug fitler
debug external-list
debug external-list delete-file {type}
debug external-list delete-file all
Delete all external list files in all vsys
debug global-protect
debug global-protect hip {set-dp-query-interval <value> | show-dp-query-interval}
| Parameter | Description |
|---|---|
<value> |
<3-60> set the interval(in seconds) to send hip query from DP to MP |
debug global-protect hip set-dp-query-interval <value>
set the interval(in seconds) to send hip query from DP to MP
debug global-protect hip show-dp-query-interval
show-dp-query-interval
debug global-protect portal {clientlessvpn}
| Parameter | Description |
|---|---|
<value> |
<60-86400> interval to send hip report |
debug global-protect portal interval <value>
interval to send hip report
debug global-protect portal off
off
debug global-protect portal on
on
debug global-protect portal show
show
debug gp-broker {off | show}
debug gp-broker off
off
debug gp-broker show
show
debug gp-broker gpsvc {reset | task | test | trace}
| Parameter | Description |
|---|---|
<value> |
key-value pair |
debug gp-broker gpsvc key-value <value>
pass key-value pair to gpsvc
debug gp-broker gpsvc reload-template
reload html template
debug gp-broker on {debug | dump | info}
debug gp-broker on debug
debug
debug gp-broker on dump
dump
debug gp-broker on info
info
debug high-availability {dataplane-status | flap-interface | internal-dump | off | show}
debug high-availability dataplane-status
Show dataplane runtime status
debug high-availability flap-interface
Flap High Availability interface
debug high-availability internal-dump
Dump internal state of agent
debug high-availability off
Turn off debug logging
debug high-availability show
Display current debug logging setting
debug high-availability knob {set | show}
debug high-availability on {debug | dump | error | info | warn}
debug high-availability on debug
Only output error, warning, info and debug logs
debug high-availability on dump
Output all logs
debug high-availability on error
Only output error logs
debug high-availability on info
Only output error, warning and info logs
debug high-availability on warn
Only output error and warning logs
debug ifmgr {dump-detail-history | dump-history | dump-portdb | pstate}
debug ifmgr dump-detail-history
show ifmgr state history detail
debug ifmgr dump-history
show ifmgr state history
debug ifmgr dump-portdb
dump ifmgr port database
debug ifmgr pstate
show ifmgr port state
debug ike {gateway <value> | socket | tunnel <value>}
| Parameter | Description |
|---|---|
<value> |
specify one IKE gateway |
debug ike gateway <value>
debug IKE gateway
debug ike socket
socket
debug ike tunnel <value>
debug IPSec tunnel
debug ike global {on}
debug ike global off
Turn off ikemgr debug logging
debug ike global show
show ikemgr debug logging
debug ike pcap {delete | off | on | show | view}
debug ike pcap delete
delete
debug ike pcap off
off
debug ike pcap on
on
debug ike pcap show
show
debug ike pcap view
view
debug ike stat {ipsec | isakmp}
debug ike stat auth
show authd requests
debug ike stat crlocsp
show CRL-OCSP requests
debug ike stat fd
show ikemgr non-IKE FDs
debug ike stat fqdn
show IKE FQDN table
debug ike stat natka
show IKE NAT-T keep alive table
debug ike stat queue
show inter-threads queue counters
debug ike stat rcp
show IKEv1 received packets
debug ike stat sadb
show sadb requests
debug ike stat sched
show ikemgr scheduler stats
debug ike stat socket-list
show IKE socket list
debug ike stat user
show IKEv1 XAuth user table
debug ike stat v1i_sa
show IKEv1 initiator SA table
debug ike stat v1r_sa
show IKEv1 responder SA table
debug ike stat v2i_sa
show IKEv2 initiator SA table
debug ike stat v2r_sa
show IKEv2 responder SA table
debug iot clear-all {type}
debug iot disable-device-id {no | yes}
debug iot disable-device-id no
no
debug iot disable-device-id yes
yes
debug iot dump {relay-ipc-distributord}
debug iot dump relay
Dump relay data struct
debug iot eal {on | reset | sending-format | test | track | validate-dpi}
| Parameter | Description |
|---|---|
<value> |
specify server address |
debug iot eal cortex-server <value>
set cortex server
debug iot eal key-value <value>
pass key-value pair to eal component
debug iot global {on}
debug iot global counter
Show global counter information
debug iot global off
off
debug iot global show
show
debug iot icd {on | reset}
| Parameter | Description |
|---|---|
<value> |
key-value pair, eg: PAN_GRPC_DECRYPT=true |
debug iot icd key-value <value>
pass key-value pair to iot component
debug iot icd set-app-match-workers <value>
Number of threads doing app match
debug iot icd trigger-app-match
match filters to cloud apps
debug iot icd verdict-server <value>
set verdict server
debug iot memory {detail | summary}
debug iot memory detail
detail
debug iot memory summary
summary
debug iot relay-ipc-distributord {set | show}
debug keymgr {list-sa | queue | socket}
debug keymgr list-sa
list-sa
debug keymgr queue
queue
debug keymgr socket
socket
debug keymgr gateway {on}
debug keymgr gateway off
Turn off IKE gateway debug logging
debug keymgr global {on}
debug keymgr global off
Turn off keymgr debug logging
debug keymgr global show
show keymgr debug logging
debug keymgr tunnel {on}
debug keymgr tunnel off
Turn off IPSec tunnel debug logging
debug l2ctrld global {on}
debug l2ctrld global off
off
debug l2ctrld global show
show
debug l2ctrld lacp {on | show}
debug l2ctrld lacp off
off
debug l2ctrld lacp set
set lacp parameters
debug l2ctrld lldp {delete | on | pcap | set | show}
debug l2ctrld lldp off
off
debug l3svc {clear | off | show}
debug l3svc clear
clear
debug l3svc off
off
debug l3svc show
show
debug l3svc captive-portal {kerberos-timeout}
debug l3svc on {debug | dump | error | info | warn}
debug l3svc on debug
debug
debug l3svc on dump
dump
debug l3svc on error
error
debug l3svc on info
info
debug l3svc on warn
warn
debug l3svc pcap {virtual-router}
debug l3svc pcap delete
delete
debug l3svc pcap off
off
debug l3svc pcap show
show
debug l3svc pcap view
view
debug l3svc reset {user-cache}
debug log-output-need-utf8 {no | show | yes}
debug log-output-need-utf8 no
no
debug log-output-need-utf8 show
show
debug log-output-need-utf8 yes
yes
debug log-receiver {cache-stats | logdb-writer-stats | off | queue-stats | show | statistics}
debug log-receiver cache-stats
cache-stats
debug log-receiver logdb-writer-stats
logdb-writer-stats
debug log-receiver off
off
debug log-receiver queue-stats
queue-stats
debug log-receiver show
show
debug log-receiver statistics
statistics
debug log-receiver asc {stats}
debug log-receiver container-page {entries <value> | off | on | timeout <value>}
| Parameter | Description |
|---|---|
<value> |
<4-65536> cache entries |
debug log-receiver container-page entries <value>
cache entries
debug log-receiver container-page off
off
debug log-receiver container-page on
on
debug log-receiver container-page timeout <value>
cache timeout
debug log-receiver contmgr status
debug log-receiver contmgr status
show content manager status
debug log-receiver corr-mgr {off | on | show | stats}
debug log-receiver correlation {filters | stats}
debug log-receiver counters filter
debug log-receiver counters filter
Apply counter filters | Pipe through a command
debug log-receiver dag {always-include-dag | disable-dag-logging | dump | off | on}
debug log-receiver dag show
Display current debug leve setting
debug log-receiver dpi {dump}
debug log-receiver dump {users}
debug log-receiver dumplog {off | on}
debug log-receiver dumplog off
off
debug log-receiver dumplog on
on
debug log-receiver edl {disable-edl-logging | dump | off | on}
debug log-receiver edl show
Display current debug leve setting
debug log-receiver fwd {off | on | show}
debug log-receiver fwd off
off
debug log-receiver fwd on
on
debug log-receiver fwd show
show
debug log-receiver ip-cache {clear}
debug log-receiver log-flow {counters | trace}
debug log-receiver log-flow counters
Show log flow stats
debug log-receiver log-flow trace
Start tracing
debug log-receiver log-forwarding {per-second-stats}
debug log-receiver log-forwarding status
status
debug log-receiver log-forwarding-connections {per-second-stats}
debug log-receiver log-forwarding-connections status
status
debug log-receiver log-purger {debug}
debug log-receiver memory {per-second-stats}
debug log-receiver memory info
info
debug log-receiver memory trim
trim
debug log-receiver netflow {clear | statistics}
debug log-receiver netflow clear
clear
debug log-receiver netflow statistics
statistics
debug log-receiver on {debug | dump | normal}
debug log-receiver on debug
debug
debug log-receiver on dump
dump
debug log-receiver on normal
normal
debug log-receiver param-tuning {rollup | syslog-threads | task-queue}
debug log-receiver per-second-stats {on}
debug log-receiver per-second-stats off
off
debug log-receiver rawlog_fwd {clear | on | set | show | stats}
debug log-receiver rawlog_fwd off
off
debug log-receiver rawlog_fwd_trial {stats}
debug log-receiver rawlog_fwd_trial connmgr
Show Connection Manager stats
debug log-receiver rawlog_fwd_trial evtmgr
Show Event Manager stats
debug log-receiver telemetry-triggers {counters | off | on}
debug log-receiver telemetry-triggers counters
counters
debug log-receiver telemetry-triggers off
off
debug log-receiver telemetry-triggers on
on
debug lpmgrd status
debug lpmgrd status
show lpmgrd status
debug lpmgrd dump {idmgr}
debug macsec
debug macsec global {on}
debug macsec global off
Turn off macsecd debug logging
debug macsec global show
Show macsecd debug logging level
debug macsec pcap {delete | off | on | show | view}
debug macsec pcap delete
Turn off MACsec packets capturing, delete the captured pcap file(s)
debug macsec pcap off
Turn off MACsec packets capturing
debug macsec pcap on
Turn on MACsec packets capturing
debug macsec pcap show
Show MACsec packets capturing status
debug macsec pcap view
Display captured MACsec packets
debug management-interface
debug management-interface dhcp {client}
debug management-server {app-usage-data-purge | check-predef-hash | clear | conn | db-intervals | dg-ctxt | log-collector-agent-status | migrate-cluster-rc | off | panorama-root-ca-info | rolledup-intervals | rule-hit-purge | show | show-predef-hash | vld}
debug management-server app-usage-data-purge
Purge app-usage data
debug management-server check-predef-hash
Check for cloud app references
debug management-server clear
Clear all debug logs
debug management-server conn
Print mgmt srvr conn entries
debug management-server db-intervals
Show available summary intervals for a given period
debug management-server dg-ctxt
show panorama dg-ctxt for configured vsys
debug management-server log-collector-agent-status
Show log collector agent status
debug management-server migrate-cluster-rc
Migrate running config to cluster mode
debug management-server off
Turn off debug logging
debug management-server panorama-root-ca-info
Show panorama root ca information
debug management-server rolledup-intervals
Show available summary intervals for a given period rolled up optimally
debug management-server rule-hit-purge
Purge rule hit-count data
debug management-server show
Display current debug logging setting
debug management-server show-predef-hash
Dump DB config to disk
debug management-server vld
vld debug commands
debug management-server app-config-trigger {no | yes}
debug management-server app-config-trigger no
no
debug management-server app-config-trigger yes
yes
debug management-server autofocus {off | on}
debug management-server autofocus off
off
debug management-server autofocus on
on
debug management-server client {disable | enable}
debug management-server configd-mem {disable | enable}
debug management-server configd-mem disable
disable
debug management-server configd-mem enable
enable
debug management-server contmgr status
debug management-server contmgr status
show content manager status
debug management-server corr-mgr {off | on | show | stats}
debug management-server db-rollup {off | on}
debug management-server db-rollup off
disable database roll up
debug management-server db-rollup on
enable database roll up
debug management-server device-monitoring {enable}
debug management-server disable-cms-conn-check {no | show | yes}
debug management-server disable-cms-conn-check no
no
debug management-server disable-cms-conn-check show
show
debug management-server disable-cms-conn-check yes
yes
debug management-server last-candidatecfg-audit {diff | info | show}
debug management-server last-candidatecfg-audit diff
diff config versions
debug management-server last-candidatecfg-audit info
list config versions
debug management-server last-candidatecfg-audit show
show config version
debug management-server log-forwarding-congestion-ctrl {set}
debug management-server log-forwarding-congestion-ctrl show
show the setting
debug management-server max-config-size {set | show}
debug management-server max-config-size set
Set max-config-size in MB
debug management-server max-config-size show
Show max-config-size in MB
debug management-server memory {info | trim}
debug management-server memory info
info
debug management-server memory trim
trim
debug management-server on {debug | dump | error | info | warn}
debug management-server on debug
Only output error, warning, info and debug logs
debug management-server on dump
Output all logs
debug management-server on error
Only output error logs
debug management-server on info
Only output error, warning and info logs
debug management-server on warn
Only output error and warning logs
debug management-server req-stats {disable | enable}
debug management-server req-stats disable
disable
debug management-server req-stats enable
enable
debug management-server rule-hit {no | yes}
debug management-server rule-hit no
no
debug management-server rule-hit yes
yes
debug management-server secure-conn {set | show}
debug management-server set {auth | cfg | comm | commit | commoncriteria | content | fqdn | lock | log | logaction | logforwarding | logquery | panorama | proxy | report | schema | server | settings}
debug management-server set all
all
debug management-server snmp-memory-map {clear | show}
debug management-server snmp-memory-map clear
Clear contents of the snmp memory mapped file
debug management-server snmp-memory-map show
Show contents of the snmp memory mapped file
debug management-server telemetry-triggers {counters}
| Parameter | Description |
|---|---|
<value> |
<0-150> Set Correlated Threat log Limit |
debug management-server telemetry-triggers correlated-threat-log-limit <value>
Set Correlated Threat log Limit
debug management-server telemetry-triggers per-signature-limit <value>
Set Per Signature limit for a day
debug management-server telemetry-triggers raw-threat-log-limit <value>
Set Raw Threat log Limit
debug management-server telemetry-triggers related-threat-log-limit <value>
Set Related Threat log Limit
debug management-server template dump-config
debug management-server template dump-config
Dump parts of the config to a file
debug management-server toggle-ui-notification {disable | enable}
debug management-server toggle-ui-notification disable
disable
debug management-server toggle-ui-notification enable
enable
debug management-server unified-log {off | on}
debug management-server unified-log off
off
debug management-server unified-log on
on
debug management-server unset {auth | cfg | comm | commit | commoncriteria | content | fqdn | lock | log | logaction | logforwarding | logquery | panorama | proxy | report | schema | server | settings}
debug management-server unset all
all
debug management-server user {bitmap | info}
debug management-server user bitmap
show admin bitmap for debugging
debug management-server user info
show user info for debugging
debug management-websrvr
debug management-websrvr backend {on}
debug management-websrvr backend off
Turn off debug logging
debug management-websrvr backend show
Display log level setting
debug md-service {internal-dump | off | show}
debug md-service internal-dump
Dump internal state of service
debug md-service off
Turn off debug logging
debug md-service show
Display current debug logging setting
debug md-service on {debug | dump | error | info | warn}
debug md-service on debug
Only output error, warning, info and debug logs
debug md-service on dump
Output all logs
debug md-service on error
Only output error logs
debug md-service on info
Only output error, warning and info logs
debug md-service on warn
Only output error and warning logs
debug mprelay {off | show}
debug mprelay off
off
debug mprelay show
show
debug mprelay on {debug | dump | error | info | warn}
debug mprelay on debug
debug
debug mprelay on dump
dump
debug mprelay on error
error
debug mprelay on info
info
debug mprelay on warn
warn
debug net-inspection {packet-limit <value> | reset | show | trace-limit <value>}
| Parameter | Description |
|---|---|
<value> |
<0-10000> limit trace of number of packets |
debug net-inspection packet-limit <value>
limit trace of number of packets
debug net-inspection reset
reset packet-limit and trace-limit count
debug net-inspection show
show net-inspection related debug settings
debug net-inspection trace-limit <value>
limit number of traces
debug net-inspection trace {config | eval | match | misc | none | setup}
debug net-inspection trace config
config
debug net-inspection trace eval
eval
debug net-inspection trace match
match
debug net-inspection trace misc
misc
debug net-inspection trace none
none
debug net-inspection trace setup
setup
debug netconfig-agent {off | show}
debug netconfig-agent off
off
debug netconfig-agent show
show
debug netconfig-agent on {debug | dump | error | info | warn}
debug netconfig-agent on debug
debug
debug netconfig-agent on dump
dump
debug netconfig-agent on error
error
debug netconfig-agent on info
info
debug netconfig-agent on warn
warn
debug object registered-ip {clear | redis-entry | show | test}
debug object registered-ip redis-clear
Clears registered-ip entries in the redis database
debug object registered-ip redis-stats
Show registered-ip stats in redis
debug object registered-ip redis-sync-from-useridd-cache
Syncs registered-ip entries from useridd deamon cache into redis. Distributord restart is recommended after this operation.
debug object registered-ip redis-sync-to-device-server
Syncs registered-ip from redis database to device server. Note: this is not applicable to Panaroma.
debug object registered-user {clear | show | test}
debug online diagnostics {get | run}
debug online diagnostics get
Get runtime of online diagnostics tests
debug online diagnostics run
Run online diagnostics tests
debug pancfg-directory-usage
debug pancfg-directory-usage clean {dynamic-updates}
debug pancfg-directory-usage clean config
Clean unused saved configurations
debug pancfg-directory-usage clean software-images
software-images
debug plugins openconfig info
debug plugins openconfig info
Show info
debug plugins vm_series {set | show}
debug pppoed global {on}
debug pppoed global off
off
debug pppoed global show
show
debug pppoed pcap {delete | off | on | show | view}
debug pppoed pcap delete
delete
debug pppoed pcap off
off
debug pppoed pcap on
on
debug pppoed pcap show
show
debug pppoed pcap view
view
debug pppoed show {config | interface}
debug predefined-report-default {disabled | enabled | show}
debug predefined-report-default disabled
disabled
debug predefined-report-default enabled
enabled
debug predefined-report-default show
show
debug preserve-prenat
debug preserve-prenat feature show
debug preserve-prenat feature show
display preserve prenat user feature
debug proxy discard-partial-client-hello {enable}
debug proxy discard-partial-client-hello show
Show current setting
debug proxy fast-session-delete {enable}
debug proxy-protocol packet-dump-max-bytes <value>
| Parameter | Description |
|---|---|
<value> |
<0-1000000> limit number of bytes to dump a packet |
debug proxy-protocol packet-dump-max-bytes <value>
limit number of bytes to dump a packet
debug proxy-protocol debug-level {debug | error | fatal | info | none | verbose | warn}
debug proxy-protocol debug-level debug
debug
debug proxy-protocol debug-level error
error
debug proxy-protocol debug-level fatal
fatal
debug proxy-protocol debug-level info
info
debug proxy-protocol debug-level none
none
debug proxy-protocol debug-level verbose
verbose
debug proxy-protocol debug-level warn
warn
debug proxy-protocol debug-mode {normal | session-limit <value> | trace-limit <value>}
| Parameter | Description |
|---|---|
<value> |
<1-1000> limit trace of number of sessions |
debug proxy-protocol debug-mode normal
normal debug mode
debug proxy-protocol debug-mode session-limit <value>
limit trace of number of sessions
debug proxy-protocol debug-mode trace-limit <value>
limit number of traces
debug proxy-protocol feature {enabled}
| Parameter | Description |
|---|---|
<value> |
<10-255> set hostid sub tlv type |
debug proxy-protocol feature hostid-subtlv-type <value>
set hostid sub tlv type
debug proxy-protocol feature show
display proxy protocol feature
debug proxy-protocol feature userid-subtlv-type <value>
set userid sub tlv type
debug rasmgr {gateway <value> | off | satellite <value> | src-ip-trie | user <value>}
| Parameter | Description |
|---|---|
<value> |
specify one rasmgr gateway |
debug rasmgr gateway <value>
debug rasmgr gateway
debug rasmgr off
off
debug rasmgr satellite <value>
debug rasmgr satellite
debug rasmgr src-ip-trie
Show ip trie for user source ip
debug rasmgr user <value>
debug rasmgr user
debug rasmgr delay-nh-update {delay-1s | delay-2s | reset}
debug rasmgr delay-nh-update delay-1s
delay-1s
debug rasmgr delay-nh-update delay-2s
delay-2s
debug rasmgr delay-nh-update reset
reset
debug rasmgr ippool reset-all
debug rasmgr ippool reset-all
Reset statistics counters
debug rasmgr on {debug | dump | normal}
debug rasmgr on debug
debug
debug rasmgr on dump
dump
debug rasmgr on normal
normal
debug rasmgr show {gateway | satellite | user}
debug rasmgr show gateway
Show rasmgr gateway debug logging status
debug rasmgr show satellite
Show rasmgr satellite debug logging status
debug rasmgr show user
Show rasmgr user debug logging status | Pipe through a command
debug rasmgr statistics {all | reset}
debug rasmgr statistics all
Show all statistics counters
debug rasmgr statistics reset
Reset statistics counters | Pipe through a command
debug rawlog_fwd
debug rawlog_fwd enable {no | yes}
debug rawlog_fwd enable no
Disable live rawlog forwarding
debug rawlog_fwd enable yes
Enable live rawlog forwarding
debug reportd {set-timeout <value> | show}
| Parameter | Description |
|---|---|
<value> |
<300-18000> Set report timeout |
debug reportd set-timeout <value>
Set report timeout
debug reportd show
Display current debug logging setting
debug reportd contmgr status
debug reportd contmgr status
show content manager status
debug reportd corr-mgr {off | on | show | stats}
debug reportd off {all | batch-mgr | cache | cache-detail | exec-mgr | general | job-kill | reset | search-engine-api | search-engine-cache-mgr | search-engine-query-detail | search-engine-query-normal | search-engine-report-mgr | search-engine-report-req | search-engine-report-resp | search-engine-req-resp | unified-log}
debug reportd off all
Turn off all report feature logs
debug reportd off batch-mgr
Turn off batch-mgr logs
debug reportd off cache
Turn off cache op logs
debug reportd off cache-detail
Turn off cache detail logs
debug reportd off exec-mgr
Turn off exec-mgr logs
debug reportd off general
Turn off general debug logs
debug reportd off job-kill
Turn off report job kill logs
debug reportd off reset
Reset reporting debug level to default
debug reportd off search-engine-api
Turn off search engine api logs
debug reportd off search-engine-cache-mgr
Turn off search-engine report cachemgr logs
debug reportd off search-engine-query-detail
Turn off search engine detail logs
debug reportd off search-engine-query-normal
Turn off search engine logs
debug reportd off search-engine-report-mgr
Turn off search-engine reportmgr logs
debug reportd off search-engine-report-req
Turn off search-engine report req logs
debug reportd off search-engine-report-resp
Turn off search-engine report resp logs
debug reportd off search-engine-req-resp
Turn off search-engine request response
debug reportd off unified-log
Output unified-logging feature logs
debug reportd on {all | batch-mgr | cache | cache-detail | debug | dump | error | exec-mgr | general | info | job-kill | search-engine-api | search-engine-cache-mgr | search-engine-query-detail | search-engine-query-normal | search-engine-report-mgr | search-engine-report-req | search-engine-report-resp | search-engine-req-resp | unified-log | warn}
debug reportd on all
Output all report feature logs
debug reportd on batch-mgr
Output batch-mgr logs
debug reportd on cache
Output cache op logs
debug reportd on cache-detail
Output detailed cache logs
debug reportd on debug
Output error, warning, info and debug logs
debug reportd on dump
Output all logs
debug reportd on error
Output error logs
debug reportd on exec-mgr
Output exec-mgr logs
debug reportd on general
Output general report feature logs
debug reportd on info
Output error, warning and info logs
debug reportd on job-kill
Output report job kill logs
debug reportd on search-engine-api
Turn on search engine api logs
debug reportd on search-engine-cache-mgr
Turn on search-engine report cachemgr logs
debug reportd on search-engine-query-detail
Turn on search engine detail logs
debug reportd on search-engine-query-normal
Turn on search engine logs
debug reportd on search-engine-report-mgr
Turn on search-engine report mgr logs
debug reportd on search-engine-report-req
Turn on search-engine report req logs
debug reportd on search-engine-report-resp
Turn on search-engine report resp logs
debug reportd on search-engine-req-resp
Turn on search engine request response
debug reportd on unified-log
Output unified-logging feature logs
debug reportd on warn
Output error and warning logs
debug reportd schedule-reports {clear | disable | enable | show}
debug reportd schedule-reports clear
clear
debug reportd schedule-reports disable
disable
debug reportd schedule-reports enable
enable
debug reportd schedule-reports show
show
debug reportd send-request-to-7k {no | show | yes}
debug reportd send-request-to-7k no
Only send query request to 7k running pre-8.0 software (default)
debug reportd send-request-to-7k show
Show the current setting for send-request-to-7k
debug reportd send-request-to-7k yes
Send query request to 7k regardless software version
debug routing {cluster | dynamic-routes | ifmon | list-mib | mib <value> | path-monitor | restart | socket}
| Parameter | Description |
|---|---|
<value> |
show routing mib tables |
debug routing cluster
show cluster runtime status
debug routing dynamic-routes
show dynamic routes from satellites
debug routing ifmon
show interface monitor status
debug routing list-mib
show list of routing mib table name
debug routing mib <value>
show routing mib tables
debug routing path-monitor
debug route path-monitor
debug routing restart
Restart routing process
debug routing socket
socket
debug routing dctrace {both | ips | pd | show}
debug routing dctrace both
ips-and-pd-trace
debug routing dctrace ips
ips-trace
debug routing dctrace pd
pd-trace
debug routing dctrace show
Show pd/ips trace
debug routing fib {clear | flush | stats}
debug routing fib clear
clear fib counters
debug routing fib flush
force forwarding table sync
debug routing fib stats
show route message stats
debug routing fqdn display
debug routing fqdn display
display fqdn mapping
debug routing global {on}
debug routing global off
off
debug routing global show
show
debug routing mpf {offload}
debug routing mpf stats
show multicast packet forwarder stats
debug routing pcap {all | bgp | igmp | ospf | ospfv3 | pim | rip}
debug routing pcap show
show
debug routing qtrace {disable | enable | flush-log | show}
debug routing qtrace disable
disable routed quick tracing
debug routing qtrace enable
enable routed quick tracing
debug routing qtrace flush-log
Flush buffered quick trace log to log file
debug routing qtrace show
Show routed quick tracing
debug run-panorama-predefined-report {no | show | yes}
debug run-panorama-predefined-report no
no
debug run-panorama-predefined-report show
show
debug run-panorama-predefined-report yes
yes
debug satd {failed-refresh-timeout | off | show}
debug satd failed-refresh-timeout
Set GlobalProtect satellite configuration failed refresh timeout
debug satd off
off
debug satd show
show
debug satd dump {certificate-pool}
debug satd on {debug | dump | normal}
debug satd on debug
debug
debug satd on dump
dump
debug satd on normal
normal
debug satd statistics {all | reset}
debug satd statistics all
Show all statistics counters
debug satd statistics reset
Reset statistics counters | Pipe through a command
debug sdwand clear
debug sdwand clear
clear debug level for IPSec tunnel
debug sdwand event-log {filter}
debug sdwand feature show
debug sdwand feature show
display enabled sdwan feature
debug sdwand global {on}
debug sdwand global off
Turn off sdwand debug logging
debug sdwand global show
show sdwand debug logging
debug sdwand path-monitor {disable | enable}
debug sdwand saas {branch | hub}
debug secure-web-gateway reset-stats
debug secure-web-gateway reset-stats
Reset secure web gateway stats
debug secure-web-gateway disable-memory-monitoring {no | yes}
debug secure-web-gateway disable-memory-monitoring no
no
debug secure-web-gateway disable-memory-monitoring yes
yes
debug secure-web-gateway log-level {critical | debug | error | info | off | trace | warning}
debug secure-web-gateway log-level critical
critical
debug secure-web-gateway log-level debug
debug
debug secure-web-gateway log-level error
error
debug secure-web-gateway log-level info
info
debug secure-web-gateway log-level off
off
debug secure-web-gateway log-level trace
trace
debug secure-web-gateway log-level warning
warning
debug set-content-download-retry attempts <value>
| Parameter | Description |
|---|---|
<value> |
<1-3> Set content download retry attempts |
debug set-content-download-retry attempts <value>
Set content download retry attempts
debug show
debug show vm-series {nic-interfaces | system}
debug show vm-series custom-metrics
Show vm-series custom metric information
debug show vm-series interfaces
Show vm-series interface information
debug snmpd {off | sysd-timeout <value>}
| Parameter | Description |
|---|---|
<value> |
<8-100> Set sysd timeout for snmpd |
debug snmpd off
Turn off debug logging
debug snmpd sysd-timeout <value>
Set sysd timeout for snmpd
debug snmpd async {off | on | show}
debug snmpd async off
Turn off async fetch
debug snmpd async on
Turn on async fetch
debug snmpd async show
Show async fetch status
debug snmpd clear_persistence {entity | interface}
debug snmpd clear_persistence entity
Clear ENTITY-MIB persistence DB
debug snmpd clear_persistence interface
Clear IF-MIB persistence DB
debug snmpd on debug
debug snmpd on debug
Only output debug logs
debug snmpd sysd-disable-retry {no | yes}
debug snmpd sysd-disable-retry no
no
debug snmpd sysd-disable-retry yes
yes
debug software {fd-limit | memsize_tracked | monitor_smaps_threshold | no-fd-limit | no-phy-limit | no-pprof | no-virt-limit | phy-limit | pprof | restart | virt-limit}
debug software fd-limit
Set open fd limit
debug software memsize_tracked
Display the size of system memory tracked
debug software monitor_smaps_threshold
Set the trigger threshold (MemAvail/MemTotal) to scan smaps in process monitoring
debug software no-fd-limit
Disable open fd limit
debug software no-phy-limit
Disable max physical memory(rss+swap) limit
debug software no-pprof
Disable pprof for the selected service
debug software no-virt-limit
Disable max virtual memory limit
debug software phy-limit
Set max physical memory(rss+swap) limit in KB
debug software pprof
Enable pprof for the selected service
debug software restart
Restart process
debug software virt-limit
Set max virtual memory limit in KB
debug software core {authd | configd | cord | device-server | dhcp | distributord | dnsproxy | gpsvc | ifmgr | ikemgr | iotd | keymgr | l2ctrl | l3-service | log-receiver | management-server | pan-comm | pan-dssd | pan-grpcd | pl-wifclient | rasmgr | reportd | routed | satd | snmpd | sslmgr | user-id | vardata-receiver | web-backend | web-server}
debug software core authd
authentication process
debug software core configd
configuration process
debug software core cord
correlation process
debug software core device-server
Device server process
debug software core dhcp
DHCP process
debug software core distributord
Distributor process
debug software core dnsproxy
Dnsproxy process
debug software core gpsvc
GlobalProtect service process
debug software core ifmgr
Interface management process
debug software core ikemgr
ikemgr process
debug software core iotd
Device-ID(IoT) process
debug software core keymgr
Keymgr process
debug software core l2ctrl
l2 control process
debug software core l3-service
L3 services server process
debug software core log-receiver
Log Receiver server process
debug software core management-server
Management server process
debug software core pan-comm
Dataplane communication process
debug software core pan-dssd
Distributed session synchronization process
debug software core pan-grpcd
grpcd client process for open-offload
debug software core pl-wifclient
wifclient process
debug software core rasmgr
SSL VPN daemon
debug software core reportd
reporting process
debug software core routed
Routing process
debug software core satd
Satellite process
debug software core snmpd
snmp process
debug software core sslmgr
Sslmgr process
debug software core user-id
User-ID process
debug software core vardata-receiver
Vardata Receiver server process
debug software core web-backend
Management web server backend process
debug software core web-server
Management web server process
debug software disk-usage {aggressive-cleaning}
debug software disk-usage cleanup
system logfile cleanup
debug software disk-usage dagger-fds-cleaning
show files that were deleted but remain held open
debug software disk-usage dangling-fds
show files that were deleted but remain held open
debug software generate-sar-report current-date
debug software generate-sar-report current-date
current-date
debug software kernelcfg {thp | zram-swap}
debug software large-core show-reserved-space
debug software large-core show-reserved-space
show reserved space in MB for large core dumps
debug software logging-level {set | show}
debug software logging-size {show}
debug software logging-size set
Set logging ratio as % of default max size
debug software resource {set | show}
debug software resource set
Set parameters for resource control
debug software resource show
show
debug software trace {configd | device-server | distributord | gpsvc | ifmgr | ikemgr | iotd | keymgr | l3-service | log-receiver | management-server | reportd | user-id | vardata-receiver | web-backend | web-server}
debug software trace configd
Configuration management process
debug software trace device-server
Device server process
debug software trace distributord
Distributord process
debug software trace gpsvc
GlobalProtect service process
debug software trace ifmgr
Interface management process
debug software trace ikemgr
ikemgr process
debug software trace iotd
Device-ID(IoT) process
debug software trace keymgr
Keymgr process
debug software trace l3-service
L3 services server process
debug software trace log-receiver
Log Receiver server process
debug software trace management-server
Management server process
debug software trace reportd
Report management process
debug software trace user-id
User-ID process
debug software trace vardata-receiver
Vardata Receiver server process
debug software trace web-backend
Management web server backend process
debug software trace web-server
Management web server process
debug sslmgr {off | statistics | tar-all-crl}
debug sslmgr off
off
debug sslmgr statistics
Show CRL/OCSP statistics
debug sslmgr tar-all-crl
Tar all CRL files
debug sslmgr clear log
debug sslmgr clear log
Clear debug logs
debug sslmgr delete {crl | ocsp | ocsp-host}
debug sslmgr on {debug | dump | error | info | warn}
debug sslmgr on debug
debug
debug sslmgr on dump
dump
debug sslmgr on error
error
debug sslmgr on info
info
debug sslmgr on warn
warn
debug sslmgr reset {session-cache | ssl-keys}
debug sslmgr reset session-cache
Reset SSL Session Cache
debug sslmgr reset ssl-keys
Reset ssl-decrypt key
debug sslmgr save ocsp
debug sslmgr save ocsp
Save OCSP cache
debug sslmgr set {crl-background-download | disable-scep-auth-cookie | parallel-processing}
| Parameter | Description |
|---|---|
<value> |
<0-86400> Set CRL validity period upon download failure (in seconds) |
debug sslmgr set crl-failed-validity-period <value>
Set CRL validity period upon download failure (in seconds)
debug sslmgr set crl-recv-speed-limit <value>
Set the global CRL maximum download speed in megabits per second
debug sslmgr set crl-timedout-validity-period <value>
Set CRL validity period upon download timedout (in seconds)
debug sslmgr set max-crl-file-size <value>
Set CRL maximum file size to process
debug sslmgr set max-inflated-crl-file-size <value>
Set CRL maximum inflated size
debug sslmgr set ocsp-host-failure-threshold <value>
Set OCSP host failure threshold
debug sslmgr set ocsp-next-update-time <value>
Set OCSP next update time in minutes
debug sslmgr set ocsp-validity-no-next-update <value>
response validity in seconds, when next update is not sent in OCSP response
debug sslmgr set ocsp-validity-status-unavailable <value>
response validity in seconds, when OCSP response status is unavailable
debug sslmgr show {memory}
debug sslmgr show crl-failed-validity-period
View the CRL cache validity period upon download failure (in seconds)
debug sslmgr show crl-recv-speed-limit
Show the global maximum CRL download speed in megabits per second
debug sslmgr show crl-timedout-validity-period
View the CRL cache validity period upon download timeout (in seconds)
debug sslmgr show max-crl-file-size
Maximum size of the CRL file for processing
debug sslmgr show max-inflated-crl-file-size
Maximum size of the inflated CRL file that should not be pruned
debug sslmgr show ocsp-host-failure-threshold
View OCSP maximum failure threshold
debug sslmgr show ocsp-next-update-time
View OCSP next update time
debug sslmgr show parallel-processing
Show whether parallel processing is enabled
debug sslmgr show session-cache-stats
View SSL Session Cache Statistics
debug sslmgr show setting
setting
debug sslmgr test {gp-client-cert-check | show-cert-check-jobs}
debug sslmgr test gp-client-cert-check
check client cert status for GP gateway
debug sslmgr test show-cert-check-jobs
show all the ongoing check-cert jobs
debug sslmgr view {ocsp | ocsp-host}
| Parameter | Description |
|---|---|
<value> |
View CRL cache |
debug sslmgr view crl <value>
View CRL cache
debug sslmgr view pending-crl-downloads
View pending crl downloads
debug streaming dump
debug streaming dump
Dump internal data
debug streaming tdb {off | on}
debug streaming tdb off
Turn off
debug streaming tdb on
Turn on
debug streaming-telemetry {set-logging-reporting-timeout <value> | show-region-list | show-schedule | show-schedule-path-list}
| Parameter | Description |
|---|---|
<value> |
<120-1200> Set logging/reporting timeout for streaming telemetry |
debug streaming-telemetry set-logging-reporting-timeout <value>
Set logging/reporting timeout for streaming telemetry
debug streaming-telemetry show-region-list
Show region_list for streaming-telemetry
debug streaming-telemetry show-schedule
Show schedule for streaming-telemetry
debug streaming-telemetry show-schedule-path-list
Show show-schedule-path-list for streaming-telemetry
debug swm {cancel | delete | history | info | list | load-uploaded | load-uploaded-cellular-firmware | load-uploaded-patch | log | rebuild-content-db | refresh | revert | show | status | unlock}
debug swm cancel
Cancel pending changes to software packages
debug swm delete
Delete specified image
debug swm history
Show history of software install operations
debug swm info
Display info on current or specified image
debug swm list
List software versions available for install
debug swm load-uploaded
Load specified uploaded image into repository
debug swm load-uploaded-cellular-firmware
Load specified cellular firmware image into repository
debug swm load-uploaded-patch
Load specified patch image into repository
debug swm log
Show log of PAN Software Manager
debug swm rebuild-content-db
Rebuild content database
debug swm refresh
revert back to last successfully installed content
debug swm revert
Revert back to previous running software packages
debug swm show
Show information of PAN Software Manager
debug swm status
Show status of PAN Software Manager
debug swm unlock
Unlock PAN Software Manager
debug swm install {firmware | image <value> | patch <value>}
| Parameter | Description |
|---|---|
<value> |
Image name to install |
debug swm install firmware
Install specified firmware
debug swm install image <value>
Image name to install
debug swm install patch <value>
Patch to merge with image
debug swm load {firmware | image <value>}
| Parameter | Description |
|---|---|
<value> |
Image name to load |
debug swm load firmware
Cellular firmware name to load
debug swm load image <value>
Image name to load
debug sysd {prefix-query | process-query | summary}
debug sysd prefix-query
query sysd per-prefix information command
debug sysd process-query
query sysd per-process information command
debug sysd summary
show sysd debug information for tech-support
debug sysd top {fetch | modify}
debug sysd top fetch
query top sysd fetch users
debug sysd top modify
query top sysd modify users
debug syslog-params {reset-to-default-settings | settings | show}
debug syslog-params reset-to-default-settings
debug syslog-params reset to default settings
debug syslog-params settings
debug syslog-params settings
debug syslog-params show
debug syslog-params show
debug system {check-fragment | disk-partition-info | disk-sync | maintenance-mode | process-info}
debug system check-fragment
check disk fragmentation
debug system disk-partition-info
Get disk partition information
debug system disk-sync
Flush all writes out to disk
debug system maintenance-mode
Reboot the system to maintenance mode
debug system process-info
Show process information
debug system disk-life disk-1
debug system disk-life disk-1
Show disk 1 life attributes
debug system disk-smart-info disk-1
debug system disk-smart-info disk-1
Show disk 1 SMART attributes
debug system ssh-key-reset {all | high-availability | management}
debug system ssh-key-reset all
Reset high-availability and management SSH keys
debug system ssh-key-reset high-availability
Reset high-availability SSH keys
debug system ssh-key-reset management
Reset management SSH keys
debug tac-login {challenge | permanently-disable | response}
debug tac-login challenge
Get challenge value for tac-login
debug tac-login permanently-disable
Blocks all TAC login access to the device. Note: Disabling access will reduce the options for TAC when debugging.
debug tac-login response
Run verification of challenge response for tac-login
debug techsupport duts {add-search-dir <value> | off | on | reset-config | run | set-byte-threshold <value>}
| Parameter | Description |
|---|---|
<value> |
Add a directory to scan |
debug techsupport duts add-search-dir <value>
Add a directory to scan
debug techsupport duts off
Disable filesize scanning
debug techsupport duts on
Enable filesize scanning
debug techsupport duts reset-config
Undo custom config for techsupport duts
debug techsupport duts run
Run techsupport duts right now
debug techsupport duts set-byte-threshold <value>
Set nontrivial filesize in bytes
debug tund clear
debug tund clear
clear debug level for IPSec tunnel
debug tund global {on}
debug tund global off
Turn off tund debug logging
debug tund global show
show tund debug logging
debug tund tunnel {on}
debug tund tunnel off
Turn off IPSec tunnel debug logging
debug tund tunnel show
show debug level for IPSec tunnel
debug ui telemetry {disabled | enabled}
debug ui telemetry disabled
Disable Pendo
debug ui telemetry enabled
Enable Pendo
debug use-proxy-for-email-server {disabled | enabled | show}
debug use-proxy-for-email-server disabled
disabled
debug use-proxy-for-email-server enabled
enabled
debug use-proxy-for-email-server show
show
debug user-id {agent <value> | cluster-get-all | cluster-peer-ip <ip/netmask> | get | off}
| Parameter | Description |
|---|---|
<value> |
specify one agent |
<ip/netmask> |
<ip/netmask> |
debug user-id agent <value>
Debug agent
debug user-id cluster-get-all
Upload User-ID data to cluster
debug user-id cluster-peer-ip <ip/netmask>
Set Dot format Cluster peer IP address
debug user-id get
Display current debug logging setting
debug user-id off
Turn off debug logging
debug user-id agent-getall-rate {rate <value> | show}
| Parameter | Description |
|---|---|
<value> |
<0-100> number of get-all requests every minute |
debug user-id agent-getall-rate rate <value>
number of get-all requests every minute
debug user-id agent-getall-rate show
show
debug user-id clear {gm-srvc-query | group}
debug user-id clear cloud-identity-engine
Clear cloud identity engine data
debug user-id clear domain-map
domain-map
debug user-id clear email-cache
Clear email cache
debug user-id clear ip-port-user-dp
Clear ts agent data from dp
debug user-id clear log
Clear debug logs
debug user-id cluster-state {inactive | leader | non-leader}
debug user-id cluster-state inactive
Set cluster node state to inactive
debug user-id cluster-state leader
Set cluster node state to leader
debug user-id cluster-state non-leader
Set cluster node state to non-leader
debug user-id cp-redirect-host-v6 {clear | show | value <value>}
| Parameter | Description |
|---|---|
<value> |
IP address or host name that maps to an IPv6 address for redirect for captive portal |
debug user-id cp-redirect-host-v6 clear
clear
debug user-id cp-redirect-host-v6 show
show
debug user-id cp-redirect-host-v6 value <value>
IP address or host name that maps to an IPv6 address for redirect for captive portal
debug user-id disable-email-cache {no | yes}
debug user-id disable-email-cache no
no
debug user-id disable-email-cache yes
yes
debug user-id disable-hip-ha {no | yes}
debug user-id disable-hip-ha no
no
debug user-id disable-hip-ha yes
yes
debug user-id disable-max-initial-wmi {off | on}
debug user-id disable-max-initial-wmi off
off
debug user-id disable-max-initial-wmi on
on
debug user-id dscd {on | subdomains}
debug user-id dscd off
Turn off dscd debug logging
debug user-id dump {cloud-identity-engine | edir-user | email-cache | hip-profile-database | idmgr | memory | relay-ipc-distributord | ts-agent | vm-monitored-objects}
debug user-id dump cluster-state
Dump cluster state
debug user-id dump com
Dump com messages statistics
debug user-id dump conn-mgr
Dump user-id conn-mgr messages statistics
debug user-id dump domain-id-table
Dump Domain ID mapping
debug user-id dump domain-map
domain-map
debug user-id dump ha
Dump ha state
debug user-id dump hip-mdm-cache
Dump hip mdm cache
debug user-id dump hip-report
Dump hip-report
debug user-id dump ip-user-mapping-stats
Show IP user mapping counters
debug user-id dump l3svc-stats
l3svc-stats
debug user-id dump log-stats
log-stats
debug user-id dump objects-in-policy
Show groups and HIP profiles used in current policy
debug user-id dump probing-stats
probing-stats
debug user-id dump relay
Dump relay data struct
debug user-id dump state
Dump user-id daemon state
debug user-id dump uid-2-metadata
Dump uid to metadata mapping
debug user-id dump uid-2-primeuid
Dump alternate uid to Prime uid mapping
debug user-id dump uid-req-stats
uid-req-stats
debug user-id dump unresolved-group-id
Show unresolved group id
debug user-id dump userPrefix-2-uid
Dump usernamePrefix to uid mapping
debug user-id dump xmlapi-stats
xmlapi-stats
debug user-id kerberos {list | purge | test}
debug user-id l3svc-max-retry {rate <value> | show}
| Parameter | Description |
|---|---|
<value> |
<1000-900000> number of retries to fetch client request |
debug user-id l3svc-max-retry rate <value>
number of retries to fetch client request
debug user-id l3svc-max-retry show
show
debug user-id l3svc-max-write-retry {rate <value> | show}
| Parameter | Description |
|---|---|
<value> |
<0-750000> number of retries to write the response |
debug user-id l3svc-max-write-retry rate <value>
number of retries to write the response
debug user-id l3svc-max-write-retry show
show
debug user-id log-ip-tag-mapping {no | yes}
debug user-id log-ip-tag-mapping no
no
debug user-id log-ip-tag-mapping yes
yes
debug user-id log-ip-user-mapping {no | yes}
debug user-id log-ip-user-mapping no
no
debug user-id log-ip-user-mapping yes
yes
debug user-id log-user-tag-mapping {no | yes}
debug user-id log-user-tag-mapping no
no
debug user-id log-user-tag-mapping yes
yes
debug user-id measure-handle-messages-duration {show | start | stop}
debug user-id measure-handle-messages-duration show
Show duration measurement statistics of handling messages from distributord
debug user-id measure-handle-messages-duration start
Start to measure duration on handling messages from distributord
debug user-id measure-handle-messages-duration stop
Stop measure duration on handling messages from distributord
debug user-id on {debug | dump | error | info | warn}
debug user-id on debug
Only output error, warning, info and debug logs
debug user-id on dump
Output all logs
debug user-id on error
Only output error logs
debug user-id on info
Only output error, warning and info logs
debug user-id on warn
Only output error and warning logs
debug user-id query-unknown-ip {off | on}
debug user-id query-unknown-ip off
off
debug user-id query-unknown-ip on
on
debug user-id refresh {cloud-identity-engine | group-mapping}
debug user-id refresh dp-uid-gid
refresh dp's user group info
debug user-id refresh user-id
refetch from user-id agent
debug user-id relay-ipc-distributord {set | show}
debug user-id reset {cloud-identity-engine | credential-filter | global-protect-mdm | group-mapping | server-monitor | ts-agent | user-id-agent | user-id-syslog-parse}
debug user-id reset captive-portal
Clear captive-portal info
debug user-id reset cluster-state
Reset svc/agent userid cluster state
debug user-id reset com
clear com messages statistics
debug user-id reset conn-mgr
clear conn-mgr messages statistics
debug user-id reset ip-user-mapping-stats
clear ip user mapping counters
debug user-id reset relay-statistics
relay-statistics
debug user-id reset user-id-manager
Clear id manager cache file
debug user-id resolve-fqdn-3p {off | on}
debug user-id resolve-fqdn-3p off
off
debug user-id resolve-fqdn-3p on
on
debug user-id save hip-profile-database
debug user-id save hip-profile-database
Save hip-profile db
debug user-id set {agent | base | features | hip | ldap | misc | relay | third-party | userid}
debug user-id set all
all
debug user-id test {agentless | cp-login | cp-logout | debug-log-category | gp-login | gp-logout | hip-profile-database | hip-report | hip-update | idmgr-change-max | idmgr-restore-default-max | probing | sso-login}
debug user-id test agentless
debug agentless user-id with wmic query
debug user-id test cp-login
Test captive-portal login
debug user-id test cp-logout
Test captive-portal logout
debug user-id test debug-log-category
test on debug log category
debug user-id test gp-login
Test GP login
debug user-id test gp-logout
Test GP logout
debug user-id test hip-profile-database
Test batch hip-profile db population
debug user-id test hip-report
Test create hip-report
debug user-id test hip-update
Test sending hip update message to user-id collectors
debug user-id test idmgr-change-max
Test idmgr change max id
debug user-id test idmgr-restore-default-max
Test idmgr restore default max id
debug user-id test probing
Trigger periodic WMI probing
debug user-id test sso-login
Test sso login
debug user-id unset {agent | base | features | hip | ldap | misc | relay | third-party | userid}
debug user-id unset all
all
debug user-id wmic-dynamic-range {off | on}
debug user-id wmic-dynamic-range off
off
debug user-id wmic-dynamic-range on
on
debug vardata-receiver {off | show | statistics}
debug vardata-receiver off
Turn off debug logging
debug vardata-receiver show
Display current debug logging setting
debug vardata-receiver statistics
statistics
debug vardata-receiver on {debug | dump | normal}
debug vardata-receiver on debug
debug
debug vardata-receiver on dump
dump
debug vardata-receiver on normal
normal
debug vardata-receiver set {third-party}
debug vardata-receiver set all
all
debug vardata-receiver unset {third-party}
debug vardata-receiver unset all
all
debug vm-memory on
debug vm-memory on
Collect memory info
debug vm-monitor
debug vm-monitor clear {source-name}
debug vm-monitor reset {source-name}
debug vm-series sock-buf {set | show}
debug wildfire {cloud-info | content-info | dp-status | file-digest | report-process | transition-file-list}
debug wildfire cloud-info
cloud-info
debug wildfire content-info
content-info
debug wildfire dp-status
dp-status
debug wildfire file-digest
check sample file
debug wildfire report-process
report-process
debug wildfire transition-file-list
transition-file-list
debug wildfire batch-forward {set}
debug wildfire file-cache {disable | enable}
debug wildfire file-cache disable
disable wildfire file cache
debug wildfire file-cache enable
enable wildfire file cache
debug wildfire monitor-log {disable | enable | interval <value> | max-size <value> | reset | settings}
| Parameter | Description |
|---|---|
<value> |
<1-60> Set log interval in minutes. Default is 20 minutes. |
debug wildfire monitor-log disable
Do not write upload log to disk
debug wildfire monitor-log enable
Write upload log to disk
debug wildfire monitor-log interval <value>
Set log interval in minutes. Default is 20 minutes.
debug wildfire monitor-log max-size <value>
Set log rotation file size in MB. Default is 25MB.
debug wildfire monitor-log reset
Reset monitor log if stuck
debug wildfire monitor-log settings
Show current log settings
debug wildfire reset {all | dp-receiver | file-cache | forwarding | log-cache | report-cache}
debug wildfire reset all
reset wildfire all
debug wildfire reset dp-receiver
reset wildfire DP receiver
debug wildfire reset file-cache
reset wildfire file cache
debug wildfire reset forwarding
reset wildfire service connection
debug wildfire reset log-cache
reset wildfire log cache
debug wildfire reset report-cache
reset wildfire report cache
debug wildfire server-selection {disable | enable}
debug wildfire server-selection disable
disable wildfire server selection
debug wildfire server-selection enable
enable wildfire server selection
debug wildfire upload-log {log}
debug wildfire upload-log show
show wildfire file upload history from memory
delete {address <name> | address-group <name> | admin-sessions | anti-virus | application <name> | application-filter <name> | application-group <name> | authentication-object <value> | cloud-identity-engine <name> | config | config-audit-history | data-capture | debug-filter | device-object <name> | device-serialno | disable-inspect | display-name | dns-proxy <name> | dnsproxy | dynamic-user-group <name> | email-scheduler <name> | external-list <name> | global-protect-clientless-vpn | group-mapping <name> | high-availability-key | high-availability-known-hosts | hip-mdm-cache | logo | pcap | pdf-summary-report <name> | policy-cache | profile-group <name> | redistribution-agent <name> | report-group <name> | reports <name> | runtime-user-db | schedule <name> | sdwan-interface-profile <name> | service <name> | service-group <name> | ssh-authentication-public-key | tag <value> | ts-agent <name> | unknown-pcap | url-content-types <value> | user-group-cache | vm-info-source <name> | wf-private | wildfire | wildfire-realtime-cache | wildfire-realtime-stats | zone <name>}
| Parameter | Description |
|---|---|
<name> |
<name> |
<value> |
object name |
delete address <name>
address
delete address-group <name>
address-group
delete admin-sessions
Delete all active administrative sessions
delete anti-virus
Remove anti-virus updates on disk
delete application <name>
application
delete application-filter <name>
application-filter
delete application-group <name>
application-group
delete authentication-object <value>
authentication-object
delete cloud-identity-engine <name>
cloud-identity-engine
delete config
Remove configuration on disk
delete config-audit-history
Delete config audit history
delete data-capture
Remove data capture files
delete debug-filter
Remove debug packet capture files on disk
delete device-object <name>
device-object
delete device-serialno
Delete device serial numbers from database
delete disable-inspect
disable-inspect
delete display-name
alphanumeric string [ 0-9a-zA-Z._-]
delete dns-proxy <name>
Assign DNS proxy parameters
delete dnsproxy
Remove dnsproxy file on disk
delete dynamic-user-group <name>
dynamic-user-group
delete email-scheduler <name>
email-scheduler
delete external-list <name>
external-list
delete global-protect-clientless-vpn
Remove Global protect clientless VPN updates on disk
delete group-mapping <name>
group-mapping
delete high-availability-key
Remove high-availability peer encryption key
delete high-availability-known-hosts
Remove high-availability peer key entry from known hosts file
delete hip-mdm-cache
Delete hip mdm cache
delete logo
Remove custom logo file
delete pcap
Remove packet capture files
delete pdf-summary-report <name>
pdf-summary-report
delete policy-cache
Remove cached compilation of policy from disk
delete profile-group <name>
profile-group
delete redistribution-agent <name>
redistribution-agent
delete report-group <name>
report-group
delete reports <name>
reports
delete runtime-user-db
Delete runtime user database. Requires commit for rebuilding.
delete schedule <name>
schedule
delete sdwan-interface-profile <name>
sdwan-interface-profile
delete service <name>
service
delete service-group <name>
service-group
delete ssh-authentication-public-key
delete ssh-authentication public key
delete tag <value>
tag
delete ts-agent <name>
ts-agent
delete unknown-pcap
Remove packet capture files for unknown sessions
delete url-content-types <value>
url-content-types
delete user-group-cache
Delete user group cache files in disk
delete vm-info-source <name>
vm-info-source
delete wf-private
Remove WF-Private updates on disk
delete wildfire
Remove wildfire updates on disk
delete wildfire-realtime-cache
Delete WildFire Realtime virus cache entries
delete wildfire-realtime-stats
Reset WildFire Realtime statistics
delete zone <name>
zone
delete auth {radius-require-msg-authentic | remote-host-check | strict-username-check}
delete auth radius-require-msg-authentic
radius-require-msg-authentic
delete auth remote-host-check
remote-host-check
delete auth strict-username-check
strict-username-check
delete authentication {system-lock-files | user-file}
delete authentication system-lock-files
lock-files
delete authentication user-file
Delete user account settings
delete content update <value>
| Parameter | Description |
|---|---|
<value> |
Filename |
delete content update <value>
Filename
delete content cache {curr-content | old-content}
delete content cache curr-content
Remove cache files based on Engine version and type
delete content cache old-content
Remove ALL old content
delete core {large-core | management-plane}
delete core large-core
Cores saved in logdb
delete core management-plane
Management plane cores
delete debug-log {mp-global | mp-log}
delete debug-log mp-global
Remove mp-global at /opt/mp-global/
delete debug-log mp-log
Remove mp-log at /var/log/pan/
delete global-protect {clientless-app <value> | clientless-app-group <value> | dhcp-server-profile <value> | global-protect-gateway <name> | global-protect-mdm <name> | global-protect-portal <name>}
| Parameter | Description |
|---|---|
<value> |
clientless vpn application name |
<name> |
<name> |
delete global-protect clientless-app <value>
Application accessed using clientless vpn
delete global-protect clientless-app-group <value>
Group of applications accessed using clientless vpn
delete global-protect dhcp-server-profile <value>
DHCP servers for GP users
delete global-protect global-protect-gateway <name>
GlobalProtect gateway user related configuration
delete global-protect global-protect-mdm <name>
GlobalProtect MDM server
delete global-protect global-protect-portal <name>
global-protect-portal
delete global-protect-client {image <value> | version <value>}
| Parameter | Description |
|---|---|
<value> |
Filename |
delete global-protect-client image <value>
Filename
delete global-protect-client version <value>
Version
delete hip-profile-database {all | check-delete-all-status | entry}
delete hip-profile-database all
all
delete hip-profile-database check-delete-all-status
check-delete-all-status
delete hip-profile-database entry
entry
delete hip-report {all | report}
delete hip-report all
Delete all hip-reports
delete hip-report report
report
delete intelligent-traffic-offload interface-mapping
delete intelligent-traffic-offload interface-mapping
Set interface mapping
delete iot cache {curr-iot | old-iot}
delete iot cache curr-iot
Remove cache files based on Engine version and type
delete iot cache old-iot
Remove ALL old iot
delete license {key <value> | token-file <value>}
| Parameter | Description |
|---|---|
<value> |
File name |
delete license key <value>
File name
delete license token-file <value>
File name
delete log-collector preference-list
delete log-collector preference-list
Clear log collector preference list
delete plugins app-data {<value> | dlp | openconfig | vm_series}
| Parameter | Description |
|---|---|
<value> |
app-data value |
delete plugins app-data dlp
dlp
delete plugins app-data openconfig
openconfig
delete plugins app-data vm_series
vm_series
delete pprof management-plane
delete pprof management-plane
Management plane pprof
delete report {custom | predefined | summary}
delete report custom
custom
delete report predefined
predefined
delete report summary
summary
delete server cert
delete server cert
cert
delete software version <value>
| Parameter | Description |
|---|---|
<value> |
Version |
delete software version <value>
Version
delete sslmgr-store {certificate-info | satellite-info}
delete sslmgr-store certificate-info
delete certificate info from portal
delete sslmgr-store satellite-info
delete satellite info of registered satellites
delete sslmgr-store satellite-info-revoke-certificate serialno <value>
| Parameter | Description |
|---|---|
<value> |
member value |
delete sslmgr-store satellite-info-revoke-certificate serialno <value>
GlobalProtect satellite serial numbers
delete url-database {all | url <value>}
| Parameter | Description |
|---|---|
<value> |
Delete url from the database |
delete url-database all
Delete url database
delete url-database url <value>
Delete url from the database
diff config
diff config
running config vs candidate config diff
exit
find
ftp
ftp export log {alarm | auth | config | data | decryption | globalprotect | gtp | sctp | system | threat | traffic | tunnel | url | userid | wildfire}
ftp export log alarm
alarm
ftp export log auth
auth
ftp export log config
config
ftp export log data
data
ftp export log decryption
decryption
ftp export log globalprotect
globalprotect
ftp export log gtp
gtp
ftp export log sctp
sctp
ftp export log system
system
ftp export log threat
threat
ftp export log traffic
traffic
ftp export log tunnel
tunnel
ftp export log url
url
ftp export log userid
userid
ftp export log wildfire
wildfire
grep mp-log
grep mp-log
mp-log
less {agent-log | custom-page | mp-backtrace | mp-global | mp-log | plugins-log | webserver-log}
less agent-log
agent-log
less custom-page
custom-page
less mp-backtrace
mp-backtrace
less mp-global
mp-global
less mp-log
mp-log
less plugins-log
plugins-log
less webserver-log
webserver-log
less LargeCore-mp-backtrace {clear | configure | debug | delete | diff | exit | find | ftp | grep | less | ls | ping | quit | request | schedule | scp | set | show | ssh | tail | target | tcpdump | test | tftp | traceroute | view-pcap}
less LargeCore-mp-backtrace clear
Clear runtime parameters
less LargeCore-mp-backtrace configure
Manipulate software configuration information
less LargeCore-mp-backtrace debug
Debug and diagnose
less LargeCore-mp-backtrace delete
Remove files from hard disk
less LargeCore-mp-backtrace diff
local configuration diffs
less LargeCore-mp-backtrace exit
Exit this session
less LargeCore-mp-backtrace find
Find CLI commands with keyword
less LargeCore-mp-backtrace ftp
Use ftp to export files
less LargeCore-mp-backtrace grep
Searches file for lines containing a pattern match
less LargeCore-mp-backtrace less
Examine debug file content
less LargeCore-mp-backtrace ls
Examine debug file listing
less LargeCore-mp-backtrace ping
Ping hosts and networks
less LargeCore-mp-backtrace quit
Exit this session
less LargeCore-mp-backtrace request
Make system-level requests
less LargeCore-mp-backtrace schedule
schedule test jobs
less LargeCore-mp-backtrace scp
Use scp to import / export files
less LargeCore-mp-backtrace set
Set operational parameters
less LargeCore-mp-backtrace show
Show operational parameters
less LargeCore-mp-backtrace ssh
Start a secure shell to another host
less LargeCore-mp-backtrace tail
Print the last 10 lines of debug file content
less LargeCore-mp-backtrace target
management session target
less LargeCore-mp-backtrace tcpdump
capture packets on management interface
less LargeCore-mp-backtrace test
verify system settings with test cases
less LargeCore-mp-backtrace tftp
Use tftp to import / export files
less LargeCore-mp-backtrace traceroute
Print the route packets take to network host
less LargeCore-mp-backtrace view-pcap
Examine packet capture file content
ls {content | custom-page | mp-backtrace | mp-log | plugins-log | webserver-log}
ls content
content
ls custom-page
custom-page
ls mp-backtrace
mp-backtrace
ls mp-log
mp-log
ls plugins-log
plugins-log
ls webserver-log
webserver-log
ls global db
ls global db
device-disable-predefined-reports.xml dg-custom-reportconfig.xml engver.ver global.xml global_app_trimmed.xml global_iot.xml global_iot_signatures.xml global_iot_trimmed.xml global_signatures.xml global_trimmed.xml groups ip2loc.txt mgtconfig.xml ostra-stage-2.dct ostra-stage-2.dct.sgn pan_app_new_types.xml pan_app_types.xml panorama-custom-reports.xml panorama-dg-saas-reportconfig.xml panorama-reportconfig.xml panorama-saas-reportconfig.xml plugin-installed.xml plugin-installed.xml.sgn plugin-uploadinfo.xml plugin-uploadinfo.xml.save plugin-uploadinfo.xml.tmp pub.pem regip reguser reportconfig-pruned.xml reportconfig.xml responsepages.xml saas-reportconfig.xml saas_characteristics_map.txt threats.xml threats.xml.db threats.xml.ser threats.xml.sev TLSv1.3_Default.xml tmp urlcat_trimmed.xml userinfo.xml utid_exclude.txt virus.xml.db virus.xml.sev vsys-custom-reportconfig.xml vsys-saas-reportconfig.xml wildfire.xml.db wildfire.xml.sev wpc.xml.db wpc.xml.sev merged_dg_ctxt.xml
ls mp-global db
ls mp-global db
device-disable-predefined-reports.xml dg-custom-reportconfig.xml engver.ver global.xml global_app_trimmed.xml global_iot.xml global_iot_signatures.xml global_iot_trimmed.xml global_signatures.xml global_trimmed.xml groups ip2loc.txt mgtconfig.xml ostra-stage-2.dct ostra-stage-2.dct.sgn pan_app_new_types.xml pan_app_types.xml panorama-custom-reports.xml panorama-dg-saas-reportconfig.xml panorama-reportconfig.xml panorama-saas-reportconfig.xml plugin-installed.xml plugin-installed.xml.sgn plugin-uploadinfo.xml plugin-uploadinfo.xml.save plugin-uploadinfo.xml.tmp pub.pem regip reguser reportconfig-pruned.xml reportconfig.xml responsepages.xml saas-reportconfig.xml saas_characteristics_map.txt threats.xml threats.xml.db threats.xml.ser threats.xml.sev TLSv1.3_Default.xml tmp urlcat_trimmed.xml userinfo.xml utid_exclude.txt virus.xml.db virus.xml.sev vsys-custom-reportconfig.xml vsys-saas-reportconfig.xml wildfire.xml.db wildfire.xml.sev wpc.xml.db wpc.xml.sev merged_dg_ctxt.xml
ping
quit
request {acknowledge | authkey | clean-replay | clear-commit-tasks | determine-new-applications | device-registration | disable-ztp | dnsproxy | encryption-level | get-application-status | get-disabled-applications | last-acknowledge-time | list-content-downloads | master-key | panorama-connectivity-check | password-hash | quota-enforcement | resolve | server | set-application-status-recursive | ui | user-id}
request acknowledge
Acknowledge alarm logs
request authkey
panorama authkey
request clean-replay
Purge entries from replay database
request clear-commit-tasks
Clear all commit tasks
request determine-new-applications
Determine new applications in content
request device-registration
Device registration process
request disable-ztp
Disable ztp
request dnsproxy
Perform DNSproxy daemon functions
request encryption-level
Change encryption level
request get-application-status
Get application status
request get-disabled-applications
List disabled applications in content
request last-acknowledge-time
Last alarm acknowledgement time
request list-content-downloads
List content downloads
request master-key
Change masterkey
request panorama-connectivity-check
check connectivity to panorama
request password-hash
Generate password hash
request quota-enforcement
Manually enforce disk quota enforcement for logs and pcaps
request resolve
resolve address to ip address
request server
Server cert
request set-application-status-recursive
Set application status
request ui
ui
request user-id
user-id
request address-expansion expand
request address-expansion expand
expand given object name.
request anti-virus
request anti-virus downgrade {install}
request anti-virus upgrade {install}
request anti-virus upgrade check
Get information from PaloAlto Networks server
request anti-virus upgrade download
Download anti-virus packages
request anti-virus upgrade info
Show information about available anti-virus packages
request api key expiration
request api key expiration
Will force all of the API keys to expire immediately.
request authentication {unlock-admin | unlock-user}
request authentication unlock-admin
Unlock locked administrators
request authentication unlock-user
Unlock locked users
request cellular interface <value>
| Parameter | Description |
|---|---|
<value> |
name value |
request cellular interface <value>
Interface operations
request cellular firmware {install}
request cellular firmware check
Get information from PaloAlto Networks server
request cellular firmware delete
Delete a given firmware image
request cellular firmware download
Download firmwares
request cellular firmware info
Show information about available firmwares
request cellular firmware scp-export
Use scp profile to export files
request cellular firmware scp-import
Use scp profile to import files
request certificate {fetch | generate-scep-client-cert | import-scep-ca-cert | is-blocked | renew | show}
request certificate fetch
Fetch device certificate
request certificate generate-scep-client-cert
Generate Client Certificate using SCEP
request certificate import-scep-ca-cert
Import SCEP CA Certificates
request certificate is-blocked
Check if certificate private key is blocked
request certificate renew
Renew certificate
request certificate show
Display Certificate
request certificate generate {alt-email <value> | hostname <value> | ip <ip/netmask> | organization-unit <value>}
| Parameter | Description |
|---|---|
<value> |
member value |
<ip/netmask> |
<ip/netmask> |
request certificate generate alt-email <value>
Subject alternate Email type
request certificate generate hostname <value>
Subject alternate name DNS type
request certificate generate ip <ip/netmask>
Subject alternate name IP type
request certificate generate organization-unit <value>
Department
request certificate revoke {certificate-name <value> | sslmgr-store}
| Parameter | Description |
|---|---|
<value> |
Name of a certificate which is not a CA |
request certificate revoke certificate-name <value>
Name of a certificate which is not a CA
request certificate revoke sslmgr-store
Revoke dynamic generated certificate status
request certificate show-blocked {vsys-name}
request certificate show-blocked shared
shared
request cluster node {state}
request commit-lock {add | remove}
request commit-lock add
Prevent other users from committing
request commit-lock remove
Release commit lock previously held
request config diff
request config diff
Compare commit versions
request config list commit-versions
request config list commit-versions
Show all the commit versions
request config-lock {add | remove}
request config-lock add
Prevent other users from changing configuration
request config-lock remove
Release config lock previously held
request content {downgrade | validity-check <value>}
| Parameter | Description |
|---|---|
<value> |
Request content validity check by version (Example: 123-456). |
request content downgrade
Perform content downgrade functions
request content validity-check <value>
Request content validity check by version (Example: 123-456).
request content upgrade {install}
request content upgrade check
Get information from PaloAlto Networks server
request content upgrade download
Download content packages
request content upgrade info
Show information about available content packages
request data-filtering
request data-filtering access-password {create | delete | modify}
request data-filtering access-password create
Create access password
request data-filtering access-password delete
Delete access password and historical data
request data-filtering access-password modify
Modify access password
request device-quarantine-list {add | delete}
request device-quarantine-list add
Add device to quarantine list
request device-quarantine-list delete
Delete device from quarantine list
request device-quarantine-list show {all | hostid <value> | serialno <value>}
| Parameter | Description |
|---|---|
<value> |
hostid of a device |
request device-quarantine-list show all
Show all devices
request device-quarantine-list show hostid <value>
hostid of a device
request device-quarantine-list show serialno <value>
serial number of a device
request device-telemetry {cancel-collect-now | collect-now | default-20min-interval | disable | disable-20min-interval | disable-5min-interval | enable | enable-20min-interval | enable-5min-interval | reload-config-now}
request device-telemetry cancel-collect-now
cancel-collect-now
request device-telemetry collect-now
Collect device telemetry data now
request device-telemetry default-20min-interval
default-20min-interval
request device-telemetry disable
Disable device telemetry
request device-telemetry disable-20min-interval
disable-20min-interval
request device-telemetry disable-5min-interval
disable-5min-interval
request device-telemetry enable
Enable device telemetry
request device-telemetry enable-20min-interval
enable-20min-interval
request device-telemetry enable-5min-interval
enable-5min-interval
request device-telemetry reload-config-now
reload-config-now
request dhcp
request dhcp client {ipv6 | management-interface | release | renew}
request dhcpv6
request dhcpv6 client {management-interface}
request global-protect-client
request global-protect-client software {activate | download}
request global-protect-client software check
Get information from PaloAlto Networks server
request global-protect-client software info
Show information about available software packages
request global-protect-clientless-vpn
request global-protect-clientless-vpn downgrade {install}
request global-protect-clientless-vpn upgrade {install}
request global-protect-clientless-vpn upgrade check
Get information from PaloAlto Networks server
request global-protect-clientless-vpn upgrade download
Download Global protect VPN packages
request global-protect-clientless-vpn upgrade info
Show information about available global protect VPN packages
request global-protect-gateway {check-client-logout-all-status | client-logout | client-logout-all | satellite-logout}
request global-protect-gateway check-client-logout-all-status
check the status of logging out all users
request global-protect-gateway client-logout
global-protect-gateway user logout
request global-protect-gateway client-logout-all
global-protect-gateway user logout
request global-protect-gateway satellite-logout
GlobalProtect gateway satellite logout
request global-protect-portal {client-logout | refresh-csc-cookie-key | refresh-scep-cookie-key | restore-satellite-cookie-expiration | set-satellite-cookie-expiration | ticket}
request global-protect-portal client-logout
GlobalProtect portal user logout
request global-protect-portal refresh-csc-cookie-key
Refresh GlobalProtect portal cookie key used for config selection
request global-protect-portal refresh-scep-cookie-key
Refresh GlobalProtect portal scep cookie key used for getting client cert from SCEP
request global-protect-portal restore-satellite-cookie-expiration
Restore GlobalProtect portal satellite(lsvpn) authentication cookie expiration time to default value (half year)
request global-protect-portal set-satellite-cookie-expiration
Set GlobalProtect satellite(lsvpn) authentication cookie expiration time
request global-protect-portal ticket
global-protect-portal agent user override ticket
request global-protect-satellite {get-gateway-config | get-portal-config | refresh-cookie-key}
request global-protect-satellite get-gateway-config
GlobalProtect satellite get config from gateway
request global-protect-satellite get-portal-config
GlobalProtect satellite get config from portal
request global-protect-satellite refresh-cookie-key
Refresh GlobalProtect satellite cookie key
request high-availability session-reestablish
request high-availability session-reestablish
Perform session reestablishment
request high-availability cluster {clear-cache | sync-from}
request high-availability state {peer}
request high-availability state functional
Set local HA Pair and cluster state to a functional
request high-availability state suspend
Set local HA Pair and cluster state to suspended
request high-availability sync-to-remote {id-manager}
request high-availability sync-to-remote candidate-config
Sync candidate configuration to peer
request high-availability sync-to-remote clock
Sync the local time and date to the peer
request high-availability sync-to-remote running-config
Sync running configuration to peer
request high-availability sync-to-remote ssh-key
Sync ha ssh key to peer
request hsm {authenticate | client-version | login | mkey-wrapping-key-rotation | reset | restart-connection | rfs-setup | rfs-sync | server-enroll <value> | support-info}
| Parameter | Description |
|---|---|
<value> |
Enter nShield Connect HSM server name to enroll server |
request hsm authenticate
Authenticate Luna SA HSM server
request hsm client-version
HSM client version
request hsm login
Luna SA HSM login
request hsm mkey-wrapping-key-rotation
Encrypt mkey with a new wrapping key on HSM
request hsm reset
Clean up HSM client side data: cert, key files, cache, etc.
request hsm restart-connection
Restart crypto process to reinitialize HSM connection with latest certificates and login credential.
request hsm rfs-setup
Set up RFS for nShield Connect
request hsm rfs-sync
Get update from RFS for nShield Connect
request hsm server-enroll <value>
Enter nShield Connect HSM server name to enroll server
request hsm support-info
Create HSM support info. Only valid for Luna SA
request hsm ha {create-ha-group | recover | replace-server | synchronize}
request hsm ha create-ha-group
HSM create HA group
request hsm ha recover
Allow a previously removed member to rejoin an HA group, or a new appliance to replace a member that failed and was removed.
request hsm ha replace-server
Replace HSM server in the HA group
request hsm ha synchronize
HSM synchronize the contents of members of the HA group
request iot validity-check <value>
| Parameter | Description |
|---|---|
<value> |
Request iot validity check by version (Example: 123-456). |
request iot validity-check <value>
Request iot validity check by version (Example: 123-456).
request iot upgrade {check | info}
request iot upgrade check
Get information from PaloAlto Networks server
request iot upgrade info
Show information about available iot packages
request license {fetch | info | install}
request license fetch
Get new license(s) using an authentication code
request license info
Show information about owned license(s)
request license install
Install a license key
request license api-key {delete | set | show}
request license api-key delete
Delete api-key
request license api-key set
Set api-key
request license api-key show
Show api-key
request license deactivate {key}
request license deactivate VM-Capacity
Delete all licenses
request license upgrade {auth-code <value> | fetch | key}
| Parameter | Description |
|---|---|
<value> |
Authorization code |
request license upgrade auth-code <value>
Authorization code
request license upgrade fetch
Retrieve upgraded keys
request license upgrade key
Upgrade capacity license
request log-collector-forwarding status
request log-collector-forwarding status
log collector forwarding status information
request logdb
request logdb migrate-to-panorama {start | status | stop}
request logdb migrate-to-panorama start
Start migration of logs on disk to log collectors
request logdb migrate-to-panorama status
Start migration of logs on disk to log collectors
request logdb migrate-to-panorama stop
Stop migration of logs on disk to log collectors
request logging-service-forwarding status
request logging-service-forwarding status
status
request logging-service-forwarding certificate {delete | fetch | fetch-noproxy | info}
request logging-service-forwarding certificate delete
delete
request logging-service-forwarding certificate fetch
fetch
request logging-service-forwarding certificate fetch-noproxy
fetch-noproxy
request logging-service-forwarding certificate info
info
request logging-service-forwarding customerinfo {fetch | show}
request logging-service-forwarding customerinfo fetch
fetch
request logging-service-forwarding customerinfo show
show
request multi-config {disabled | enabled}
request multi-config disabled
Disable multi-config
request multi-config enabled
Enable multi-config
request password-change-history {dump-history | re-encrypt}
request password-change-history dump-history
Dump content of password history
request password-change-history re-encrypt
re-encrypt
request plugins {auto-upgrade | check | dau | debug | delete-package <value> | download | install <value> | quick-install <value> | reset-plugin | revert-install <value> | set | upload}
| Parameter | Description |
|---|---|
<value> |
delete-package value |
request plugins auto-upgrade
Enable/disable auto-upgrade of installed plugins
request plugins check
Get information from Palo Alto Networks server
request plugins dau
Enable/disable dau plugin
request plugins debug
Plugin debug settings
request plugins delete-package <value>
delete-package
request plugins download
Download plugin packages
request plugins install <value>
install
request plugins quick-install <value>
quick-install
request plugins reset-plugin
Reset Plugin
request plugins revert-install <value>
If set and install fails, current installed version will be reinstalled
request plugins set
Set global plugin options
request plugins upload
upload
request plugins dlp {hide-old-config}
request plugins openconfig {streaming_telemetry}
request plugins openconfig info
Request info
request plugins reset-password {<value> | dlp | openconfig | vm_series}
| Parameter | Description |
|---|---|
<value> |
reset-password value |
request plugins reset-password dlp
dlp
request plugins reset-password openconfig
openconfig
request plugins reset-password vm_series
vm_series
request plugins uninstall {<value> | dlp | openconfig}
| Parameter | Description |
|---|---|
<value> |
uninstall value |
request plugins uninstall dlp
dlp
request plugins uninstall openconfig
openconfig
request plugins vm_series {aws | azure | session-resiliency}
request plugins vm_series cloud-logging
Set periodic interval for cloud logging.
request plugins vm_series dpdk-mbuf-config
vm-series DPDK Mbuf config parameteres
request plugins vm_series numa-perf-optimize
Optimize the performance of PA-VM with NUMA awareness
request plugins vm_series packet-mirroring
Set packet-mirroring mode
request plugins vm_series pktmmap-ring-size
vm-series PKTMMAP Ring size
request plugins vm_series service-chain-mappings
Set zone to service chain mappings in sdb
request plugins vm_series set-cores
Set system cores
request plugins vm_series set-session-max
Set max session count
request pppoe ipv6
request pppoe ipv6
Request actions related to PPPOE IPv6 clients
request restart system
request restart system
Reboot the system
request routing {delete-config | migrate-config | show-config | show-error | show-logical-router | show-virtual-router}
request routing delete-config
Delete migrated routing configuration
request routing migrate-config
Migrate routing configuration to advanced-routing mode
request routing show-config
Show migrated advanced-routing configuration
request routing show-error
Show errors in migrated advanced-routing configuration
request routing show-logical-router
Show logical router list
request routing show-virtual-router
Show virtual router list
request saas_agent
request saas_agent certificate info
request saas_agent certificate info
info
request shutdown system
request shutdown system
Shutdown the system
request stats dump
request stats dump
dump
request streaming-telemetry reload-config
request streaming-telemetry reload-config
reload-config
request support {check | info}
request support check
Get support information from PaloAlto Networks server
request support info
Show information about downloaded support information
request system {idmap-sync | private-data-reset}
request system idmap-sync
Trigger an ID Map Sync job
request system private-data-reset
Delete private data, keep software, content installations
request system clone-system-disk target <value>
| Parameter | Description |
|---|---|
<value> |
Select target disk |
request system clone-system-disk target <value>
Select target disk
request system external-list {global-find | list-capacities | refresh | show | stats | url-test <value>}
| Parameter | Description |
|---|---|
<value> |
test accessibility for url |
request system external-list global-find
Returns EDL object
request system external-list list-capacities
List Capacities of IP, Domain and URL
request system external-list refresh
refresh external-lists
request system external-list show
Print IPs/Domains/URLs in an external list
request system external-list stats
MP op-command to show EDL object stats
request system external-list url-test <value>
test accessibility for url
request system fqdn {refresh | show | show-object}
request system fqdn refresh
Force refreshes all FQDNs used
request system fqdn show
(Deprecated) Print FQDNs used in rules and their IPs
request system fqdn show-object
(Deprecated) Print FQDN object resolved IPs
request system heartbeat-pause {set | show}
request system patch {apply | check | download | info | install | revert | scp-export | scp-import}
request system patch apply
Apply latest downloaded and installed software patch
request system patch check
Get information from PaloAlto Networks server
request system patch download
Download software patches
request system patch info
Show information about available software patches
request system patch install
Install a downloaded software patch
request system patch revert
Revert an installed and applied software patch
request system patch scp-export
Use scp profile to export files
request system patch scp-import
Use scp profile to import files
request system self-test {force-crypto-failure}
request system self-test crypto
Run crypto self-tests
request system self-test force-software-integrity-failure
Force a software integrity self-test failure
request system self-test software-integrity
Run software-integrity self-test
request system self-test-job {crypto | software-integrity}
request system self-test-job crypto
Run crypto self-tests job
request system self-test-job software-integrity
Run software-integrity self-test job
request system software {check | download | info | install}
request system software eligible
Download software packages
request system software scp-export
Use scp profile to export files
request system software scp-import
Use scp profile to import files
request tech-support {copy-to-remote-host | dump}
request tech-support copy-to-remote-host
Copy the dumped tech-support file to remote host
request tech-support dump
dump
request telemetry-data dump
request telemetry-data dump
dump
request url-filtering update
request url-filtering update
update url category
request url-filtering install pandb-database
request url-filtering install pandb-database
Install uploaded Pan DB database
request url-filtering save url-database
request url-filtering save url-database
Save PaloAlto Networks URL database into a file.
request wf-private
request wf-private downgrade install <value>
| Parameter | Description |
|---|---|
<value> |
Install wildfire private cloud packages |
request wf-private downgrade install <value>
Install wildfire private cloud packages
request wf-private upgrade {install}
request wf-private upgrade check
Get information from Wildfire Private cloud server
request wf-private upgrade download
Download wildfire private cloud packages
request wf-private upgrade info
Show information about available wildfire private cloud packages
request wildfire registration
request wildfire registration
Perform wildfire registration
request wildfire downgrade {install}
request wildfire upgrade {install}
request wildfire upgrade check
Get information from PaloAlto Networks server
request wildfire upgrade download
Download wildfire packages
request wildfire upgrade info
Show information about available wildfire packages
request wildfire-realtime-cache {add | delete}
request wildfire-realtime-cache add
Add WildFire real-time cache entry
request wildfire-realtime-cache delete
Delete wildFire real-time cache entry
schedule {botnet-report | uar-report}
schedule botnet-report
botnet-report
schedule uar-report
uar-report
schedule saas-applications-usage-report
schedule saas-applications-usage-report all {entry}
schedule saas-applications-usage-report selected-user-group entry
schedule saas-applications-usage-report selected-user-group entry
entry
schedule saas-applications-usage-report selected-zone {entry}
scp
scp export {application-block-page | application-pcap | captive-portal-text | certificate | configuration | crl | debug-pcap | device-state | device-telemetry | dnsproxy | file-block-continue-page | file-block-page | filter-pcap | global-protect-portal-custom-help-page | global-protect-portal-custom-home-page | global-protect-portal-custom-login-page | global-protect-portal-custom-welcome-page | high-availability-key | hsm-client-cert | hsm-support-info | ike-config-file | inbound-proxy-key | license-token-file | logdb | mfa-login-page | mgmt-pcap | pan-url-db | pdf-reports | ssl-cert-status-page | ssl-optout-text | stats-dump | tech-support | telemetry-data | threat-pcap | ui-translation-mapping | url-block-page | url-coach-text | virus-block-page | web-interface-certificate}
scp export application-block-page
Use scp to export application block comfort page
scp export application-pcap
Use scp to export application packet capture
scp export captive-portal-text
Use scp to export captive portal text
scp export certificate
Use scp to export X.509 certificate
scp export configuration
Use scp to export configuration
scp export crl
Use scp to export crl.tgz
scp export debug-pcap
Use scp to export packet capture generated for purpose of debugging daemons
scp export device-state
Use scp to export device-state
scp export device-telemetry
Use scp to export device-telemetry collect-now
scp export dnsproxy
Use tftp to export dnsproxy file
scp export file-block-continue-page
Use scp to export file block comfort page
scp export file-block-page
Use scp to export file block comfort page
scp export filter-pcap
Use scp to export filter packet capture
scp export global-protect-portal-custom-help-page
Use scp to export global protect help page
scp export global-protect-portal-custom-home-page
Use scp to export GlobalProtect portal custom home page
scp export global-protect-portal-custom-login-page
Use scp to export global protect login page
scp export global-protect-portal-custom-welcome-page
Use scp to export global protect welcome page
scp export high-availability-key
Use scp to export high-availability peer encryption key
scp export hsm-client-cert
Use scp to export safenet hsm client certificate
scp export hsm-support-info
Use scp to export hsm support info file
scp export ike-config-file
Use scp to export IKE configuration file
scp export inbound-proxy-key
Use scp to export inbound proxy key
scp export license-token-file
Use scp to export deactivate license token file
scp export logdb
Use scp to export logdb
scp export mfa-login-page
Use scp to export MFA login page
scp export mgmt-pcap
Use scp to export packet capture from management interface
scp export pan-url-db
Use scp to export pan url database
scp export pdf-reports
Use scp to export PDF reports
scp export ssl-cert-status-page
Use scp to export SSL cert status page
scp export ssl-optout-text
Use scp to export ssl optout text
scp export stats-dump
Use scp to export AVR report data (default is last 7 days)
scp export tech-support
Use scp to export tech support info
scp export telemetry-data
Use scp to export sent telemetry data
scp export threat-pcap
Use scp to export threat packet capture
scp export ui-translation-mapping
Use scp to export UI translation mapping
scp export url-block-page
Use scp to export url block comfort page
scp export url-coach-text
Use scp to export url coach text
scp export virus-block-page
Use scp to export virus block comfort page
scp export web-interface-certificate
Use scp to export web-interface-certificate
scp export core-file {large-corefile | management-plane}
scp export core-file large-corefile
Use scp to export large core files in logdb
scp export core-file management-plane
Use scp to export management-plane core-file
scp export log {alarm | auth | config | data | decryption | globalprotect | gtp | sctp | system | threat | traffic | tunnel | url | userid | wildfire}
scp export log alarm
alarm
scp export log auth
auth
scp export log config
config
scp export log data
data
scp export log decryption
decryption
scp export log globalprotect
globalprotect
scp export log gtp
gtp
scp export log sctp
sctp
scp export log system
system
scp export log threat
threat
scp export log traffic
traffic
scp export log tunnel
tunnel
scp export log url
url
scp export log userid
userid
scp export log wildfire
wildfire
scp export log-file management-plane
scp export log-file management-plane
Use scp to export management-plane log-file
scp export pprof-file management-plane
scp export pprof-file management-plane
Use scp to export management-plane pprof-file
scp import {anti-virus | application-block-page | captive-portal-text | cellular-firmware | certificate | configuration | content | credential-block-page | credential-coach-text | data-filter-block-page | device-state | file-block-continue-page | file-block-page | global-protect-client | global-protect-clientless-vpn | global-protect-portal-custom-help-page | global-protect-portal-custom-home-page | global-protect-portal-custom-login-page | global-protect-portal-custom-welcome-page | high-availability-key | hsm-ciphertrust-client-cert | hsm-ciphertrust-client-key | hsm-ciphertrust-server-cert | hsm-server-cert | idp-metadata | keypair | license | logdb | mfa-login-page | pandb-url-database | patch | plugin | private-key | safe-search-block-page | saml-auth-internal-error-page | signed-url-database | software | ssl-cert-status-page | ssl-optout-text | ui-translation-mapping | url-block-page | url-coach-text | url-database | virus-block-page | wildfire}
scp import anti-virus
Use scp to import anti-virus content
scp import application-block-page
Use scp to import application block comfort page
scp import captive-portal-text
Use scp to import captive portal text
scp import cellular-firmware
Use scp to import cellular firmware bundle
scp import certificate
Use scp to import X.509 certificate
scp import configuration
Use scp to import configuration
scp import content
Use scp to import database content
scp import credential-block-page
Use scp to import credential enforcement block comfort page
scp import credential-coach-text
Use scp to import credential enforcement coach text
scp import data-filter-block-page
Use scp to import data filter block page
scp import device-state
Use scp to import device state
scp import file-block-continue-page
Use scp to import file block continue page
scp import file-block-page
Use scp to import file block page
scp import global-protect-client
Use scp to import GlobalProtect client package
scp import global-protect-clientless-vpn
Use scp to import global protect clientless vpn package
scp import global-protect-portal-custom-help-page
Use scp to import GlobalProtect portal custom help page
scp import global-protect-portal-custom-home-page
Use scp to import GlobalProtect portal custom home page
scp import global-protect-portal-custom-login-page
Use scp to import GlobalProtect portal custom login page
scp import global-protect-portal-custom-welcome-page
Use scp to import GlobalProtect portal custom welcome page
scp import high-availability-key
Use scp to import high-availability peer encryption key
scp import hsm-ciphertrust-client-cert
Import CipherTrust Manager HSM client certificate
scp import hsm-ciphertrust-client-key
Import CipherTrust Manager HSM client key
scp import hsm-ciphertrust-server-cert
Import CipherTrust Manager HSM server CA certificate
scp import hsm-server-cert
Import HSM server certificate
scp import idp-metadata
import SAML IDP metadata
scp import keypair
Use scp to import X.509 key
scp import license
Use scp to import license file
scp import logdb
Use scp to import logdb
scp import mfa-login-page
Use scp to import MFA login page
scp import pandb-url-database
Use scp to import pandb url database package
scp import patch
Use scp to import software patch package
scp import plugin
Use scp to import plugin package
scp import private-key
Use scp to import X.509 key
scp import safe-search-block-page
Use scp to import safe search block comfort page
scp import saml-auth-internal-error-page
Use scp to import saml auth internal error page
scp import signed-url-database
Use scp to import signed url database package
scp import software
Use scp to import software package
scp import ssl-cert-status-page
Use scp to import SSL cert status page
scp import ssl-optout-text
Use scp to import SSL optout text
scp import ui-translation-mapping
Use scp to import UI translation mapping
scp import url-block-page
Use scp to import url block comfort page
scp import url-coach-text
Use scp to import url coach text
scp import url-database
Use scp to import url database package
scp import virus-block-page
Use scp to import virus block comfort page
scp import wildfire
Use scp to import wildfire content
set {address <name> | address-group <name> | application-filter <name> | application-group <name> | audit-comment | authentication-object <value> | clock | cloud-identity-engine <name> | data-access-password <value> | device-inventory-upload | device-object <name> | display-name <name> | dns-proxy <name> | dynamic-user-group <name> | email-scheduler <name> | external-list <name> | group-mapping <name> | max-num-images | nw-id-api | password | pdf-summary-report <name> | profile-group <name> | quarantine | redistribution-agent <name> | report-group <name> | reports <name> | schedule <name> | sdwan-interface-profile <name> | service <name> | service-group <name> | site-license <value> | ssh | ssh-authentication | ssl | sslmgr-check-cert-jobs | tag <value> | transceiver-monitor-rate | ts-agent <name> | url-content-types <value> | user-id | user-id-ssl-auth | vm-info-source <name> | zone <name> | ztp}
| Parameter | Description |
|---|---|
<name> |
<name> |
<value> |
object name |
set address <name>
address
set address-group <name>
address-group
set application-filter <name>
application-filter
set application-group <name>
application-group
set audit-comment
Set audit comment for an xpath
set authentication-object <value>
authentication-object
set clock
System date and time
set cloud-identity-engine <name>
cloud-identity-engine
set data-access-password <value>
access password for data filtering logs
set device-inventory-upload
Upload device csvfile
set device-object <name>
device-object
set display-name <name>
alphanumeric string [ 0-9a-zA-Z._-]
set dns-proxy <name>
Assign DNS proxy parameters
set dynamic-user-group <name>
dynamic-user-group
set email-scheduler <name>
email-scheduler
set external-list <name>
external-list
set group-mapping <name>
group-mapping
set max-num-images
Maximum number of software or content images
set nw-id-api
IMSI/IMEI XML API
set password
password
set pdf-summary-report <name>
pdf-summary-report
set profile-group <name>
profile-group
set quarantine
Quarantine XML API
set redistribution-agent <name>
redistribution-agent
set report-group <name>
report-group
set reports <name>
reports
set schedule <name>
schedule
set sdwan-interface-profile <name>
sdwan-interface-profile
set service <name>
service
set service-group <name>
service-group
set site-license <value>
Set site license
set ssh
SSH related configurations
set ssh-authentication
change ssh-authentication public key
set ssl
ssl related values
set sslmgr-check-cert-jobs
Set max check-cert jobs for sslmgr
set tag <value>
tag
set transceiver-monitor-rate
Set transceiver monitoring interval in seconds. (0 means off)
set ts-agent <name>
ts-agent
set url-content-types <value>
url-content-types
set user-id
User Identification XML API
set user-id-ssl-auth
user-id-ssl-auth
set vm-info-source <name>
vm-info-source
set zone <name>
zone
set ztp
zero touch provisioning
set advanced-routing fib {check}
set application cache {no | yes}
set application cache no
no
set application cache yes
yes
set application dump {off | on}
set application dump off
Turn off application dump
set application dump on
Turn on application dump
set application dump-unknown {no | yes}
set application dump-unknown no
no
set application dump-unknown yes
yes
set application heuristics {no | yes}
set application heuristics no
no
set application heuristics yes
yes
set application notify-user {no | yes}
set application notify-user no
no
set application notify-user yes
yes
set application supernode {no | yes}
set application supernode no
no
set application supernode yes
yes
set application traceroute {enable}
| Parameter | Description |
|---|---|
<value> |
<0-255> set the TTL threshold value for traceroute identification |
set application traceroute ttl-threshold <value>
set the TTL threshold value for traceroute identification
set application use-appid-cache-ssl-sni {no | yes}
set application use-appid-cache-ssl-sni no
no
set application use-appid-cache-ssl-sni yes
yes
set application use-cache-for-identification {no | yes}
set application use-cache-for-identification no
no
set application use-cache-for-identification yes
yes
set application use-simple-appsigs {no | yes}
set application use-simple-appsigs no
no
set application use-simple-appsigs yes
yes
set auth radius-require-msg-authentic {no | yes}
set auth radius-require-msg-authentic no
no
set auth radius-require-msg-authentic yes
yes
set auth remote-host-check {no | yes}
set auth remote-host-check no
no
set auth remote-host-check yes
yes
set auth strict-username-check {no | yes}
set auth strict-username-check no
no
set auth strict-username-check yes
yes
set authentication radius-vsa-off {client-gp-version | client-hostname | client-os | client-source-ip | user-domain}
set authentication radius-vsa-off client-gp-version
If set, authd will not send client GP version VSA in subsequent authentication requests
set authentication radius-vsa-off client-hostname
If set, authd will not send client hostname VSA in subsequent authentication requests
set authentication radius-vsa-off client-os
If set, authd will not send client OS VSA in subsequent authentication requests
set authentication radius-vsa-off client-source-ip
If set, authd will not send client source ip VSA in subsequent authentication requests
set authentication radius-vsa-off user-domain
If set, authd will not send user domain VSA in subsequent authentication requests
set authentication radius-vsa-on {client-gp-version | client-hostname | client-os | client-source-ip | user-domain}
set authentication radius-vsa-on client-gp-version
If set, authd will send client GP version VSA in subsequent authentication requests
set authentication radius-vsa-on client-hostname
If set, authd will send client hostname VSA in subsequent authentication requests
set authentication radius-vsa-on client-os
If set, authd will send client OS VSA in subsequent authentication requests
set authentication radius-vsa-on client-source-ip
If set, authd will send client source ip VSA in subsequent authentication requests
set authentication radius-vsa-on user-domain
If set, authd will send user domain VSA in subsequent authentication requests
set authentication saml_signature_digest_algorithm {sha1 | sha224 | sha256 | sha384 | sha512}
set authentication saml_signature_digest_algorithm sha1
Digest algorithm is sha1, while signagure algorithm is rsa-sha1 or ecdsa-sha1 based on certificate algorithm
set authentication saml_signature_digest_algorithm sha224
Digest algorithm is sha224, while signagure algorithm is rsa-sha224 or ecdsa-sha224 based on certificate algorithm
set authentication saml_signature_digest_algorithm sha256
Digest algorithm is sha256, while signagure algorithm is rsa-sha256 or ecdsa-sha256 based on certificate algorithm
set authentication saml_signature_digest_algorithm sha384
Digest algorithm is sha384, while signagure algorithm is rsa-sha384 or ecdsa-sha384 based on certificate algorithm
set authentication saml_signature_digest_algorithm sha512
Digest algorithm is sha512, while signagure algorithm is rsa-sha512 or ecdsa-sha512 based on certificate algorithm
set cli {hide-ip | hide-user | timeout}
set cli hide-ip
Hide last octet of IP from logs
set cli hide-user
Hide user names from logs
set cli timeout
Set administrative session timeout values
set cli config-output-format {default | json | set | xml}
set cli config-output-format default
default
set cli config-output-format json
json
set cli config-output-format set
set
set cli config-output-format xml
xml
set cli confirmation-prompt {off | on}
set cli confirmation-prompt off
off
set cli confirmation-prompt on
on
set cli op-command-xml-output {off | on}
set cli op-command-xml-output off
off
set cli op-command-xml-output on
on
set cli pager {off | on}
set cli pager off
off
set cli pager on
on
set cli scripting-mode {off | on}
set cli scripting-mode off
off
set cli scripting-mode on
on
set cli terminal {type}
| Parameter | Description |
|---|---|
<value> |
<1-500> Set terminal height |
set cli terminal height <value>
Set terminal height
set cli terminal width <value>
Set terminal width
set device-inventory-edit add-device
set device-inventory-edit add-device
Add Device
set device-inventory-edit edit-devices device-list <value>
| Parameter | Description |
|---|---|
<value> |
MAC address (XX:XX:XX:XX:XX:XX) |
set device-inventory-edit edit-devices device-list <value>
List of Devices
set fwd-uni-dhcp-packet-on-dhcp-client-intf {no | yes}
set fwd-uni-dhcp-packet-on-dhcp-client-intf no
no
set fwd-uni-dhcp-packet-on-dhcp-client-intf yes
yes
set global-protect {arg-maxlen <value> | clientless-app <value> | clientless-app-group <value> | dhcp-server-profile <value> | global-protect-gateway <name> | global-protect-mdm <name> | global-protect-portal <name>}
| Parameter | Description |
|---|---|
<value> |
<16-4096> Max string length of GlobalProtect request arguments supported |
<name> |
<name> |
set global-protect arg-maxlen <value>
Max string length of GlobalProtect request arguments supported
set global-protect clientless-app <value>
Application accessed using clientless vpn
set global-protect clientless-app-group <value>
Group of applications accessed using clientless vpn
set global-protect dhcp-server-profile <value>
DHCP servers for GP users
set global-protect global-protect-gateway <name>
GlobalProtect gateway user related configuration
set global-protect global-protect-mdm <name>
GlobalProtect MDM server
set global-protect global-protect-portal <name>
GlobalProtect portal configuration
set global-protect redirect {location <value> | off | on | show}
| Parameter | Description |
|---|---|
<value> |
location to fetch GlobalProtect agent binary file |
set global-protect redirect location <value>
location to fetch GlobalProtect agent binary file
set global-protect redirect off
off
set global-protect redirect on
on
set global-protect redirect show
show
set global-protect satellite-serialnumberip-auth {disable | enable}
set global-protect satellite-serialnumberip-auth disable
disable Satellite Serialnumber + IP authentication
set global-protect satellite-serialnumberip-auth enable
enable Satellite Serialnumber + IP authentication
set gtp euip-spoof-log-freq <value>
| Parameter | Description |
|---|---|
<value> |
<1-50000> Number of EUIP spoofing event firewall counts before logging (1 - 50000 events/log) Default: 1 (events/log) |
set gtp euip-spoof-log-freq <value>
Number of EUIP spoofing event firewall counts before logging (1 - 50000 events/log) Default: 1 (events/log)
set gtp ebi5-del-gtpc {no | yes}
set gtp ebi5-del-gtpc no
no
set gtp ebi5-del-gtpc yes
yes
set gtp nodrop {no | yes}
set gtp nodrop no
no
set gtp nodrop yes
yes
set gtp sw-cut-thru {no | yes}
set gtp sw-cut-thru no
no
set gtp sw-cut-thru yes
yes
set logrcvr offline-logpurger {interval <value> | percentage-threshold <value>}
| Parameter | Description |
|---|---|
<value> |
<1-60> Configure interval period (minutes) for offline logpurger |
set logrcvr offline-logpurger interval <value>
Configure interval period (minutes) for offline logpurger
set logrcvr offline-logpurger percentage-threshold <value>
Configure percentage threshold for offline logpurger
set management-server logging {import-end | import-start | off | on}
set management-server logging import-end
Exit import mode
set management-server logging import-start
Enter import mode
set management-server logging off
Disallow logging
set management-server logging on
Allow logging
set mgmtbond {lldp | no_lldp | no_revert | revert}
set mgmtbond lldp
lldp
set mgmtbond no_lldp
no_lldp
set mgmtbond no_revert
no_revert
set mgmtbond revert
revert
set panorama {off | on}
set panorama off
Disallow connection to panorama
set panorama on
Allow connection to panorama
set preserve-prenat-feature
set preserve-prenat-feature adjust-mtu {no | yes}
set preserve-prenat-feature adjust-mtu no
no
set preserve-prenat-feature adjust-mtu yes
yes
set preserve-prenat-feature verify-checksum {no | yes}
set preserve-prenat-feature verify-checksum no
no
set preserve-prenat-feature verify-checksum yes
yes
set sctp fast-sack {no | yes}
set sctp fast-sack no
no
set sctp fast-sack yes
yes
set sctp nodrop {no | yes}
set sctp nodrop no
no
set sctp nodrop yes
yes
set session {accelerated-aging-scaling-factor <value> | accelerated-aging-threshold <value> | default | ingress_backlogs_duration <value> | ingress_backlogs_threshold <value> | pvst-native-vlan-id <value> | scan-scaling-factor <value> | scan-threshold <value> | tcp-cong-ctrl <value> | tcp-reject-small-initial-window-threshold <value> | tcp-rsts <value> | timeout-5gc-delete <value> | timeout-captive-portal <value> | timeout-default <value> | timeout-discard-default <value> | timeout-discard-sctp <value> | timeout-discard-tcp <value> | timeout-discard-udp <value> | timeout-icmp <value> | timeout-scan <value> | timeout-sctp <value> | timeout-sctp-cookie <value> | timeout-sctp-init <value> | timeout-sctp-shutdown <value> | timeout-tcp <value> | timeout-tcp-delayed-ack <value> | timeout-tcp-half-closed <value> | timeout-tcp-time-wait <value> | timeout-tcp-unverified-rst <value> | timeout-tcphandshake <value> | timeout-tcpinit <value> | timeout-udp <value>}
| Parameter | Description |
|---|---|
<value> |
<2-16> set accelerated session aging scaling factor (power of 2) |
set session accelerated-aging-scaling-factor <value>
set accelerated session aging scaling factor (power of 2)
set session accelerated-aging-threshold <value>
set accelerated aging threshold in percentage of session utilization
set session default
restore all session settings to default
set session ingress_backlogs_duration <value>
set ingress_backlogs_duration (0-10)
set session ingress_backlogs_threshold <value>
set ingress_backlogs_threshold (0-100)
set session pvst-native-vlan-id <value>
setting native vlan id for pvst
set session scan-scaling-factor <value>
set scan scaling factor
set session scan-threshold <value>
resource utilization threshold to trigger session scan
set session tcp-cong-ctrl <value>
choose fptcp congestion control reno = 1, scalable = 2, bic = 3, cubic = 4
set session tcp-reject-small-initial-window-threshold <value>
reject TCP packet with initial rcv window smaller than this threshold
set session tcp-rsts <value>
Drop RST packets after receiving configured number of RST packets in S2C direction. Value 0- No RST dropped
set session timeout-5gc-delete <value>
set 5gc delete timeout value in seconds
set session timeout-captive-portal <value>
set captive portal session timeout value in seconds
set session timeout-default <value>
set session default timeout value in seconds
set session timeout-discard-default <value>
set timeout of non-tcp/udp session in discard state
set session timeout-discard-sctp <value>
set sctp discard timeout value in seconds
set session timeout-discard-tcp <value>
set timeout of tcp session in discard state
set session timeout-discard-udp <value>
set timeout of udp session in discard state
set session timeout-icmp <value>
timeout-icmp
set session timeout-scan <value>
application trickling timeout value in seconds
set session timeout-sctp <value>
set sctp timeout value in seconds
set session timeout-sctp-cookie <value>
set sctp init cookie timeout value in seconds
set session timeout-sctp-init <value>
set sctp init timeout value in seconds
set session timeout-sctp-shutdown <value>
set sctp shutdown timeout value in seconds
set session timeout-tcp <value>
timeout-tcp
set session timeout-tcp-delayed-ack <value>
set session tcp delayed ack timeout value in milliseconds
set session timeout-tcp-half-closed <value>
set session tcp half closed timeout value in seconds
set session timeout-tcp-time-wait <value>
set session tcp half closed timeout value in seconds
set session timeout-tcp-unverified-rst <value>
set session tcp timeout value after receiving a RST with unverified sequence number in seconds
set session timeout-tcphandshake <value>
set session tcp handshake timeout value in seconds
set session timeout-tcpinit <value>
set session tcp initial timeout value in seconds
set session timeout-udp <value>
timeout-udp
set session accelerated-aging-enable {no | yes}
set session accelerated-aging-enable no
no
set session accelerated-aging-enable yes
yes
set session broadcast-first-packet {no | yes}
set session broadcast-first-packet no
no
set session broadcast-first-packet yes
yes
set session change-smac-in-resp {no | yes}
set session change-smac-in-resp no
no
set session change-smac-in-resp yes
yes
set session distribution-policy {fixed}
set session distribution-policy ingress-slot
select DP on ingressing slot
set session distribution-policy round-robin
select DP by round robin between active DPs
set session distribution-policy session-load
select DP based on session load
set session drop-stp-packet {no | yes}
set session drop-stp-packet no
no
set session drop-stp-packet yes
yes
set session erspan {no | yes}
set session erspan no
no
set session erspan yes
yes
set session inflight_monitoring {no | yes}
set session inflight_monitoring no
no
set session inflight_monitoring yes
yes
set session intelligent-traffic-offload {interface-mapping | pkt-min <value> | rate-min <value> | tcp-timeout <value> | udp-timeout <value>}
| Parameter | Description |
|---|---|
<value> |
<1-9999> |
set session intelligent-traffic-offload interface-mapping
Set interface mapping
set session intelligent-traffic-offload pkt-min <value>
pkt-min
set session intelligent-traffic-offload rate-min <value>
rate-min
set session intelligent-traffic-offload tcp-timeout <value>
tcp-timeout
set session intelligent-traffic-offload udp-timeout <value>
udp-timeout
set session offload {no | yes}
set session offload no
no
set session offload yes
yes
set session packet-buffer-latency-measurement {no | yes}
set session packet-buffer-latency-measurement no
no
set session packet-buffer-latency-measurement yes
yes
set session pass-through-1q-pcp {no | yes}
set session pass-through-1q-pcp no
no
set session pass-through-1q-pcp yes
yes
set session resource-limit-behavior {bypass | drop}
set session resource-limit-behavior bypass
bypass
set session resource-limit-behavior drop
drop
set session rewrite-pvst-pvid {no | yes}
set session rewrite-pvst-pvid no
no
set session rewrite-pvst-pvid yes
yes
set session run-to-completion {no | yes}
set session run-to-completion no
no
set session run-to-completion yes
yes
set session strict-checksum {no | yes}
set session strict-checksum no
no
set session strict-checksum yes
yes
set session sw-cut-thru {no | yes}
set session sw-cut-thru no
no
set session sw-cut-thru yes
yes
set session tcp-reject-diff-syn {no | yes}
set session tcp-reject-diff-syn no
no
set session tcp-reject-diff-syn yes
yes
set session tcp-reject-non-syn {no | yes}
set session tcp-reject-non-syn no
no
set session tcp-reject-non-syn yes
yes
set session tcp-reject-small-initial-window-enable {no | yes}
set session tcp-reject-small-initial-window-enable no
no
set session tcp-reject-small-initial-window-enable yes
yes
set session tcp-retransmit-scan {no | yes}
set session tcp-retransmit-scan no
no
set session tcp-retransmit-scan yes
yes
set session tcp-strict-rst {no | yes}
set session tcp-strict-rst no
no
set session tcp-strict-rst yes
yes
set session tcp-tfo-app {no | yes}
set session tcp-tfo-app no
no
set session tcp-tfo-app yes
yes
set session teardown-upon-fwd-zonechange {no | yes}
set session teardown-upon-fwd-zonechange no
no
set session teardown-upon-fwd-zonechange yes
yes
set snmpd refresh-timer-period {10 | 20 | 30}
set snmpd refresh-timer-period 10
10
set snmpd refresh-timer-period 20
20
set snmpd refresh-timer-period 30
30
set ssl-conn-on-cert fail-all-conns {False | True}
set ssl-conn-on-cert fail-all-conns False
False
set ssl-conn-on-cert fail-all-conns True
True
set ssl-conn-on-cert fail-syslog-conns {False | True}
set ssl-conn-on-cert fail-syslog-conns False
override fail-all-conns for syslog connections
set ssl-conn-on-cert fail-syslog-conns True
ignored if fail-all-conns is False
set syslog fqdn-refresh {no | yes}
set syslog fqdn-refresh no
no
set syslog fqdn-refresh yes
yes
set syslog ssl-conn-validation {all-conns}
set syslog ssl-conn-validation explicit
Explicit SSL cert parameter validation settings for all connections.
set system
set system setting {additional-threat-log | alg-natref | alg-persistent-nat | appid-match | ctd | ctd-mode | dpdk-pkt-io | fast-fail-over | icmp6-error | jumbo-frame | logging | mgmt-interface-swap | mp-memory-monitor | mp-vr-vif-install-only-host-route | multi-vsys | packet | packet-descriptor-monitor | packet-path-test | paloalto-networks-service-proxy | persistent-dipp-alert | pow | pow-poll-timeout | rip-poison-reverse | shared-policy | ssl-decrypt | target-vsys | template | util | wildfire | zip}
| Parameter | Description |
|---|---|
<value> |
<60-65535> ARP cache timeout interval, in seconds |
set system setting arp-cache-timeout <value>
ARP cache timeout interval, in seconds
set system setting ctd-mode-default
Restore default setting
set system setting delay-interface-process
Delay Interface status change processing
set system setting ip6-defrag-timeout <value>
IPv6 defragmentation timeout interval, in seconds
set system setting pppoe-dont-send-eol
Don't send EOL option on PPPoE client interface
set ueip timeout <value>
| Parameter | Description |
|---|---|
<value> |
<1-1440> UEIP timeout minutes (1 - 1440 minutes) Default: 1440 (minutes) |
set ueip timeout <value>
UEIP timeout minutes (1 - 1440 minutes) Default: 1440 (minutes)
set xmlapi-group {add | delete | refresh}
set xmlapi-group add
add
set xmlapi-group delete
delete
set xmlapi-group refresh
refresh
show {address <name> | address-group <name> | admins | api-key-expiration-ts | application <name> | application-filter <name> | application-group <name> | authentication-object <value> | bad-custom-signature | chassis-ready | clock | cloud-auth-service-alerts | cloud-auth-service-metadata | cloud-auth-service-profiles | cloud-auth-service-regions | cloud-auth-service-tenants | cloud-identity-engine <name> | cloud-management-status | commit-locks | config-locks | device-object <name> | dynamic-user-group <name> | email-scheduler <name> | external-list <name> | group-mapping <name> | license-token-files | logging-status | management-clients | max-num-images | netstat | ntp | obsolete-disabled-ssl-exclusions | operational-mode | oss-license | panorama-certificates | panorama-status | pdf-summary-report <name> | predefined-iot | profile-group <name> | qos | redistribution-agent <name> | report-group <name> | reports <name> | rule-hit-count | schedule <name> | sdwan-interface-profile <name> | service <name> | service-group <name> | snmpd | ssh-fingerprints | sslmgr-max-check-cert-jobs | statistics | syslog-ssl-conn-validation | tag <value> | template <name> | threat | ts-agent <name> | tunnel-acceleration | upgrade-history | url-content-types | user-id-ssl-auth | vm-info-source <name> | wildfire-realtime-cloud-status | wildfire-realtime-stats | x-authenticated-user | zone <name> | zone-protection}
| Parameter | Description |
|---|---|
<name> |
<name> | Pipe through a command |
<value> |
object name | Pipe through a command |
show address <name>
address
show address-group <name>
address-group
show admins
Show active administrators
Admin From Client Session-start Idle-for Session-expiry
---------------------------------------------------------------------------------------------
* claude-pano 192.0.2.1 CLI 05/22/2026 11:58:39 00:00:00s 06/21/2026 11:58:39
show api-key-expiration-ts
Shows the time before which any API keys would be invalid
show application <name>
application
show application-filter <name>
application-filter
show application-group <name>
application-group
show authentication-object <value>
authentication-object
show bad-custom-signature
Show bad performance custom signatures
No bad performance custom signatureshow chassis-ready
Show whether dataplane has a running policy
yes
show clock
Show system date and time
Fri May 22 11:58:50 PDT 2026
show cloud-auth-service-alerts
Get alerts from cloud authentication service profiles
show cloud-auth-service-metadata
Get cloud authentication service metadata for a region
show cloud-auth-service-profiles
Get cloud authentication service profiles of a tenant for a region
Invalid syntax.show cloud-auth-service-regions
Get cloud authentication service deployed regions
show cloud-auth-service-tenants
Get cloud authentication service tenants for a region
show cloud-identity-engine <name>
cloud-identity-engine
show cloud-management-status
Show cloud management connection status
show commit-locks
Show list of commit locks
Invalid syntax.show config-locks
Show list of config locks
Invalid syntax.show device-object <name>
device-object
show dynamic-user-group <name>
dynamic-user-group
show email-scheduler <name>
email-scheduler
show external-list <name>
external-list
show group-mapping <name>
group-mapping
show license-token-files
Show license token files for manual license deactivation
Server error : No license token files existshow logging-status
Show logging status and info
-----------------------------------------------------------------------------------------------------------------------------
Type Last Log Created Last Log Fwded Last Seq Num Fwded Last Seq Num Acked Total Logs Fwded
-----------------------------------------------------------------------------------------------------------------------------
Log Collector : SERIAL000000004
Connection IP : lr-cms0
Conn Source IP : lr - def
High speed mode : Disabled
Connection Status : lr - Active
Rate : 0 logs/sec
traffic Not Available Not Available 0 0 0
threat Not Available Not Available 0 0 0
hipmatch Not Available Not Available 0 0 0
gtp-tunnel Not Available Not Available 0 0 0
auth Not Available Not Available 0 0 0
iptag Not Available Not Available 0 0 0
userid Not Available Not Available 0 0 0
sctp Not Available Not Available 0 0 0
decryption Not Available Not Available 0 0 0
config Not Available Not Available 0 0 0
system Not Available Not Available 0 0 0
globalprotect Not Available Not Available 0 0 0
Log Collector :
Connection IP : lr-cms1
Conn Source IP : lr - def
High speed mode : Disabled
Connection Status : lr - Inactive
Rate : 0 logs/sec
traffic Not Available Not Available 0 0 0
threat Not Available Not Available 0 0 0
hipmatch Not Available Not Available 0 0 0
gtp-tunnel Not Available Not Available 0 0 0
auth Not Available Not Available 0 0 0
iptag Not Available Not Available 0 0 0
userid Not Available Not Available 0 0 0
sctp Not Available Not Available 0 0 0
decryption Not Available Not Available 0 0 0
config Not Available Not Available 0 0 0
system Not Available Not Available 0 0 0
globalprotect Not Available Not Available 0 0 0
show management-clients
Show internal management server clients
Client PRI State Progress
-------------------------------------------------------------------------
routed 30 init 0
ha_agent 25 init 0
ifmgr 20 init 0 (op cmds only)
device 20 init 0
csad 10 init 0
ikemgr 10 init 0
keymgr 10 init 0 (op cmds only)
reportd 10 init 0
logrcvr 10 init 0
dhcpd 10 init 0
varrcvr 10 init 0
rasmgr 10 init 0
useridd 10 init 0
satd 10 init 0
sslmgr 10 init 0
authd 10 init 0
pppoed 10 init 0
dnsproxyd 10 init 0
cryptod 10 init 0
dagger 10 init 0 (op cmds only)
l2ctrld 10 init 0
iotd 10 init 0
distributord 10 init 0
gp_broker 10 init 0
Overall status: init. Progress: 0
Warnings:
Errors:
show max-num-images
Show maximum number of software or content images
Maximum images to keep is set to 5show netstat
Print network connections and statistics
show ntp
Show NTP synchronization state
NTP state:
NTP not synched, using local clock
show obsolete-disabled-ssl-exclusions
Show disabled predefined ssl-decrypt exclusions not present in the installed content
show operational-mode
Show device operational mode setting
normalshow oss-license
show license for open source packages
Error querying installed plugins: too many values to unpack (expected 4)show panorama-certificates
Show panorama certificate list
-rw-r--r-- 1 root root 3.4K May 20 14:32 client.pem
show panorama-status
Show panorama connection status
Panorama Server 1 : 192.0.2.2
Connected : yes
HA state : Unknown
show pdf-summary-report <name>
pdf-summary-report
show predefined-iot
Show predefined IoT config
Server error : xpath is a required fieldshow profile-group <name>
profile-group
show qos
Show QoS run-time information
Invalid syntax.show redistribution-agent <name>
redistribution-agent
show report-group <name>
report-group
show reports <name>
reports
show rule-hit-count
Show policy rule hit-count information
Invalid syntax.show schedule <name>
schedule
show sdwan-interface-profile <name>
sdwan-interface-profile
show service <name>
service
show service-group <name>
service-group
show snmpd
Show options for snmpd daemon
Invalid syntax.show ssh-fingerprints
Show management ssh public key fingerprints
Invalid syntax.show sslmgr-max-check-cert-jobs
Show max check-cert jobs in sslmgr
10
show statistics
Show device statistics
TASK PID N_PACKETS CONTINUE ERROR DROP BYPASS TERMINATE
0 23325 0 0 0 0 0 0
1 23153 SERIAL000000005 63427 835 0 0 SERIAL000000006
2 23154 SERIAL000000007 SERIAL000000008 816 0 0 SERIAL000000009
3 23155 SERIAL000000010 SERIAL000000011 871 1 0 SERIAL000000012
task 0(pid: 23325) pan_timer
task 1(pid: 23153) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_mgmt flow_np module_internal send_out flow_host
task 2(pid: 23154) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_ctrl flow_np module_internal send_out flow_host send_host
task 3(pid: 23155) flow_lookup flow_fastpath flow_slowpath flow_forwarding flow_np module_internal pktlog_forwarding send_out flow_host
show syslog-ssl-conn-validation
Show syslog ssl connection validation settings
syslogng ssl connection validation settings:
all-conns: enforce
crl: enforce
ocsp: enforce
eku: enforce
show tag <value>
tag
show template <name>
template
show threat
Show Threat id descriptions
show ts-agent <name>
ts-agent
show tunnel-acceleration
Show status of tunnel acceleration for Tunnel Content Inspection
show upgrade-history
Show the software versions installed on the device.
show url-content-types
url-content-types
show user-id-ssl-auth
user-id-ssl-auth
show vm-info-source <name>
vm-info-source
show wildfire-realtime-cloud-status
Show WildFire Realtime cloud status
show wildfire-realtime-stats
Show WildFire Realtime statistics
show x-authenticated-user
x-authenticated-user
show zone <name>
zone | Pipe through a command
show zone-protection
Show zone protection runtime statistics
show adem {probes | routeinfo}
show adem probes
Show outgoing probes table
show adem routeinfo
Show ADEM route information
show advanced-routing {fib | interface | logical-router | resource | route | static-route-path-monitor}
show advanced-routing fib
Show forwarding table entries
show advanced-routing interface
Show interface status
show advanced-routing logical-router
Show all configured logical-routers
show advanced-routing resource
Show resource usage
show advanced-routing route
Show RIB entries
show advanced-routing static-route-path-monitor
Show Static Route Path Monitor
show advanced-routing bfd {active-profile | details | drop-counters | summary}
show advanced-routing bfd active-profile
Show active BFD profiles
show advanced-routing bfd details
Show detailed BFD session entries
show advanced-routing bfd drop-counters
Show BFD session drop counters
show advanced-routing bfd summary
Show summary BFD session entries
show advanced-routing bgp {filters | peer}
show advanced-routing bgp loc-rib-detail
Show BGP loc-rib details
show advanced-routing bgp peer-groups
Show BGP Peer-Group(s) configurations
show advanced-routing bgp rib-out-detail
Show BGP rib-out details
show advanced-routing bgp route
Show BGP Routes
show advanced-routing bgp summary
Show BGP Summary
show advanced-routing multicast {igmp | msdp | pim}
show advanced-routing multicast fib
Show multicast fib entries
show advanced-routing multicast group-permission
Show multicast group permission
show advanced-routing multicast route
Show multicast route entries
show advanced-routing ospf {area | dumplsdb | graceful-restart | interface | lsdb | neighbor | summary | virt-link | virt-neighbor}
show advanced-routing ospf area
Show OSPF area status
show advanced-routing ospf dumplsdb
Show ospfv2 LS database status with all details
show advanced-routing ospf graceful-restart
Show ospfv2 graceful restart status
show advanced-routing ospf interface
Show OSPF interface status
show advanced-routing ospf lsdb
Show OSPF LS database status
show advanced-routing ospf neighbor
Show OSPF neighbor status
show advanced-routing ospf summary
Show OSPF summary information
show advanced-routing ospf virt-link
Show OSPF virtual link status
show advanced-routing ospf virt-neighbor
Show OSPF virtual neighbor status
show advanced-routing ospfv3 {area | dumplsdb | graceful-restart | interface | lsdb | neighbor | summary | virt-link | virt-neighbor}
show advanced-routing ospfv3 area
Show OSPFv3 area status
show advanced-routing ospfv3 dumplsdb
Show OSPFv3 LS database status with all details
show advanced-routing ospfv3 graceful-restart
Show OSPFv3 graceful restart status
show advanced-routing ospfv3 interface
Show OSPFv3 interface status
show advanced-routing ospfv3 lsdb
Show OSPFv3 LS database status
show advanced-routing ospfv3 neighbor
Show OSPFv3 neighbor status
show advanced-routing ospfv3 summary
Show OSPFv3 summary information
show advanced-routing ospfv3 virt-link
Show OSPFv3 virtual link status
show advanced-routing ospfv3 virt-neighbor
Show OSPFv3 virtual neighbor status
show advanced-routing rip {database | interface | peer | summary}
show advanced-routing rip database
Show RIP route database
show advanced-routing rip interface
Show RIP interface status
show advanced-routing rip peer
Show RIP peer status
show advanced-routing rip summary
Show RIP summary information
show applications list <value>
| Parameter | Description |
|---|---|
<value> |
name of app-group or app-filter |
show applications list <value>
list of app-groups or app-filter names
show arp {<value> | all | management}
| Parameter | Description |
|---|---|
<value> |
Interface name |
show arp all
all
show arp management
management
show auth {radius-require-msg-authentic | remote-host-check | strict-username-check}
show auth radius-require-msg-authentic
radius-require-msg-authentic
show auth remote-host-check
remote-host-check
show auth strict-username-check
strict-username-check
show authentication {allowlist | groupdb | groupnames | local-user-db | locked-users | service-principal | service-principals | statistics}
show authentication allowlist
Show allowlist
show authentication groupdb
Show groupdb
show authentication groupnames
Show groupnames
show authentication local-user-db
Local user database
show authentication locked-users
Show locked users
show authentication service-principal
Show service principal in the keytab of auth profile
show authentication service-principals
Show all service principals in the keytab of auth profile, including their realms
show authentication statistics
Show authentication stat for an admin user from CLI
show cli {idle-timeout | info | permissions}
show cli idle-timeout
Show timeout information for this adminitrative session
show cli info
Show various CLI info
show cli permissions
Show permissions
show cloud-appid {app-objects-in-policy | app-to-filtergroup-mapping | application <value> | connection-to-cloud | ha-info | overlap-appid | version}
| Parameter | Description |
|---|---|
<value> |
application name |
show cloud-appid app-objects-in-policy
Show application-filter/application-groups referred in policy
show cloud-appid app-to-filtergroup-mapping
Show application to matched filter and groups
show cloud-appid application <value>
Show Application info for UI
show cloud-appid connection-to-cloud
Show gRPC connection status to cloud application server
show cloud-appid ha-info
Show statistics of cloud application high availability
show cloud-appid overlap-appid
Show duplicated applications in predefined content
show cloud-appid version
Show Cloud-AppID version
show cloud-appid application-filter {all | option}
show cloud-appid application-filter all
Show cloud apps in all application-filters
show cloud-appid application-filter option
Show cloud apps matching specific filter
show cloud-appid application-group {all | option}
show cloud-appid application-group all
Show cloud apps in all application-groups
show cloud-appid application-group option
Show cloud apps in specific group
show cloud-appid cloud-app-data {app-metadata | application | container}
show cloud-appid signature-dp {app-signature | threat-signature}
| Parameter | Description |
|---|---|
<value> |
check if application is used on dp |
show cloud-appid signature-dp app-container-mapping
show application-to-container mappings
show cloud-appid signature-dp app-sig-mapping
show signatures-to-application mappings
show cloud-appid signature-dp appid <value>
check if application is used on dp
show cloud-appid signature-dp application-dp-all
show all applications used on DP
show cloud-appid signature-dp ignored-cloudapp
Show ignored cloud apps
show cloud-appid signature-dp pending-request
Show pending signature requests on MP
show cloud-appid signature-dp statistics
show signature statistics
show cloud-appid task {all | statistics | task-index <value>}
| Parameter | Description |
|---|---|
<value> |
task index |
show cloud-appid task all
Show all cloud application tasks
show cloud-appid task statistics
statistics of task management
show cloud-appid task task-index <value>
task index
show cloud-appid transaction {all | trans-index <value>}
| Parameter | Description |
|---|---|
<value> |
task index |
show cloud-appid transaction all
Show all transactions
show cloud-appid transaction trans-index <value>
task index
show cloud-userid {config | config-details | statistics}
show cloud-userid config
Show cloud userid config
show cloud-userid config-details
Show cloud userid config details
show cloud-userid statistics
Show cloud user statistics
show cluster {all | leader | nodes}
show cluster all
show cluster information
show cluster leader
show cluster leader
show cluster nodes
show cluster nodes
show cluster local {config-version | faults | initial-tasks | interface | node-id | state}
show cluster local config-version
show version of Panorama pushed configuration
show cluster local faults
show cluster node faults
show cluster local initial-tasks
show cluster node initialization tasks
show cluster local interface
show cluster node interface
show cluster local node-id
show cluster node id
show cluster local state
show cluster node state
show cluster-membership show-slot-info
show cluster-membership show-slot-info
show global membership table
show cluster-userid statistics
show cluster-userid statistics
Show cluster upload/download statistics
show config {candidate | commit-scope | diff | effective-running | merged | pushed-cluster | pushed-shared-policy | pushed-template | running | synced | synced-diff}
show config candidate
Candidate configuration
show config commit-scope
Commit Scope
show config diff
Diff running and candidate configuration
show config effective-running
Effective running configuration
show config merged
pushed template and local config merge
show config pushed-cluster
Cluster config pushed to the device
show config pushed-shared-policy
Shared policy pushed to the device
show config pushed-template
Template pushed to the device
show config running
Running configuration
show config synced
Configuration last synchronized with HA peer
show config synced-diff
Diff remote configuration between HA peers
show config audit {base-version | base-version-no-deletes | version}
show config audit info
Information
show config list {admins | audit-comments | change-summary | changes}
show config list admins
admins in access domain
show config list audit-comments
Show audit comments
show config list change-summary
show summary of uncommitted changed components
show config list changes
list uncommitted changes
show config saved {<value> | candidate-config}
| Parameter | Description |
|---|---|
<value> |
Saved configuration |
show config saved candidate-config
candidate-config running-config.xml 2026/05/20 16:23:39 12.2K
show counter {management-server | rate <value> | total-throughput}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show counter management-server
Show management server counter information
show counter rate <value>
Show interface rate information
show counter total-throughput
Show real-time total throughput | Pipe through a command
show counter global {name}
show counter global filter
Apply counter filters
show counter interface {<value> | all | management}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show counter interface all
Show all interface counters
show counter interface management
Show management interface counter information
show ctd-agent {config | debug <value> | dp-config | shm-health-check | statistics | version}
| Parameter | Description |
|---|---|
<value> |
Debug |
show ctd-agent config
Show ctd-agent in-memory configuration
show ctd-agent debug <value>
Debug
show ctd-agent dp-config
Show ctd-agent input configuration file
show ctd-agent shm-health-check
Show shm health check result
show ctd-agent statistics
Show ctd-agent statistics
show ctd-agent version
Show ctd-agent software version
show ctd-agent status {errors | security-client | shm | workers}
show ctd-agent status errors
errors recorded
show ctd-agent status security-client
security client status
show ctd-agent status shm
shared memory status
show ctd-agent status workers
workers status | Pipe through a command
show device-certificate {info | status}
show device-certificate info
info
show device-certificate status
status
show device-telemetry {collect-now | details | region-list | settings}
show device-telemetry collect-now
Show device telemetry collect-now status
show device-telemetry details
Show device telemetry details
show device-telemetry region-list
Show device telemetry region-list
show device-telemetry settings
Show device telemetry settings
show device-telemetry stats {all | device-health-performance | product-usage | threat-prevention}
show device-telemetry stats all
Show device telemetry stats for all categories
show device-telemetry stats device-health-performance
Show device telemetry stats for Device and Health Prevention category
show device-telemetry stats product-usage
Show device telemetry stats for Product Usage category
show device-telemetry stats threat-prevention
Show device telemetry stats for Threat Prevention category
show dhcp client {ipv6 | state}
show dhcp client ipv6-gateway-address
show dynamically learnt Ipv6 default gateway
show dhcp client mgmt-interface-state
Show management interface state
show dhcp client mgmt6-interface-state
Show IPv6 management interface state
show dhcp inherited state
show dhcp inherited state
Show Inherited Interface IPv6 details
show dhcp server {settings}
show dhcp server lease
Show leases on one or all interfaces
show dns-proxy {<name> | ddns}
show dns-proxy ddns
DDNS status
show dns-proxy cache {dump | filter}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
show dns-proxy cache all
Show all DNS Proxy cache information
show dns-proxy cache mgmt-obj
Show default DNS Proxy cache information
show dns-proxy cache name <value>
DNS Proxy object name
show dns-proxy dns-signature {cache | content | counters | info}
show dns-proxy dns-signature cache
cache
show dns-proxy dns-signature content
content
show dns-proxy dns-signature counters
counters
show dns-proxy dns-signature info
info
show dns-proxy fqdn {all | mgmt-obj | name <value>}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
show dns-proxy fqdn all
Show all DNS Proxy FQDNs
show dns-proxy fqdn mgmt-obj
Show default DNS Proxy FQDNs
show dns-proxy fqdn name <value>
DNS Proxy object name
show dns-proxy settings {all | mgmt-obj | name <value>}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
show dns-proxy settings all
Show all DNS Proxy settings
show dns-proxy settings mgmt-obj
Show default DNS Proxy settings
show dns-proxy settings name <value>
DNS Proxy object name
show dns-proxy socket-count all
show dns-proxy socket-count all
Show all DNS Proxy socket count
show dns-proxy static-entries {dump | filter}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
show dns-proxy static-entries all
Show all DNS Proxy static entries
show dns-proxy static-entries name <value>
DNS Proxy object name
show dns-proxy statistics {all | mgmt-obj | name <value>}
| Parameter | Description |
|---|---|
<value> |
DNS Proxy object name |
show dns-proxy statistics all
Show all DNS Proxy statistics
show dns-proxy statistics mgmt-obj
Show default DNS Proxy statistics
show dns-proxy statistics name <value>
DNS Proxy object name
show dos-protection {rule <name> | zone <name>}
| Parameter | Description |
|---|---|
<name> |
<name> |
show dos-protection rule <name>
DoS protection rule name
show dos-protection zone <name>
Zone name
show global-protect {auth-requests | clientless-app <value> | clientless-app-group <value> | dhcp-server-profile <value> | global-protect-gateway <name> | global-protect-mdm <name> | global-protect-portal <name> | location | redirect | tasks}
| Parameter | Description |
|---|---|
<value> |
clientless vpn application name | Pipe through a command |
<name> |
<name> | Pipe through a command |
show global-protect auth-requests
Show GlobalProtect max concurrent authentication requests in gpsvc
show global-protect clientless-app <value>
Application accessed using clientless vpn
show global-protect clientless-app-group <value>
Group of applications accessed using clientless vpn
show global-protect dhcp-server-profile <value>
DHCP servers for GP users
show global-protect global-protect-gateway <name>
GlobalProtect gateway user related configuration
show global-protect global-protect-mdm <name>
GlobalProtect MDM server
show global-protect global-protect-portal <name>
GlobalProtect portal configuration | Pipe through a command
show global-protect location
Show GlobalProtect location
show global-protect redirect
Show GlobalProtect agent software download redirect setting
show global-protect tasks
Show GlobalProtect max concurrent tasks in gpsvc
show global-protect-firewall
Invalid syntax.show global-protect-firewall summary firewall-client-version-last-activity-time
show global-protect-firewall summary firewall-client-version-last-activity-time
Time of client version last activity
show global-protect-gateway {current-satellite | current-user | gateway | previous-satellite | previous-user | statistics}
show global-protect-gateway current-satellite
Show current GlobalProtect gateway satellites
show global-protect-gateway current-user
Show current GlobalProtect gateway users
show global-protect-gateway gateway
Show list of GlobalProtect gateway configuration
show global-protect-gateway previous-satellite
Show previous GlobalProtect gateway satellites
show global-protect-gateway previous-user
Show previous user session for GlobalProtect gateway users
show global-protect-gateway statistics
Show statistics of current GlobalProtect gateway users
show global-protect-gateway flow {name <value> | tunnel-id <value>}
| Parameter | Description |
|---|---|
<value> |
Show for given GlobalProtect gateway tunnel |
show global-protect-gateway flow name <value>
Show for given GlobalProtect gateway tunnel
show global-protect-gateway flow tunnel-id <value>
Show specific tunnel information | Pipe through a command
show global-protect-gateway flow-site-to-site {name <value> | tunnel-id <value>}
| Parameter | Description |
|---|---|
<value> |
Show for given GlobalProtect site-to-site gateway tunnel |
show global-protect-gateway flow-site-to-site name <value>
Show for given GlobalProtect site-to-site gateway tunnel
show global-protect-gateway flow-site-to-site tunnel-id <value>
Show specific tunnel information | Pipe through a command
show global-protect-gateway summary {all | detail}
show global-protect-gateway summary all
Show GlobalProtect gateway all
show global-protect-gateway summary detail
Show GlobalProtect gateway detail
show global-protect-mdm statistics
show global-protect-mdm statistics
Show GlobalProtect MDM statistics
show global-protect-mdm state {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> GlobalProtect MDM name |
show global-protect-mdm state all
Show all GlobalProtect MDM servers
show global-protect-portal {cookie-cache | current-user | global-protect-portal | satellite-cookie-expiration | statistics}
show global-protect-portal cookie-cache
clientless-vpn cookie cache
show global-protect-portal current-user
Show current GlobalProtect portal users
show global-protect-portal global-protect-portal
satellite serialnum ip auth related config in portal
show global-protect-portal satellite-cookie-expiration
Show GlobalProtect portal satellite authentication cookie expiration time
show global-protect-portal statistics
Show statistics for all GlobalProtect portals
show global-protect-portal satellite-serialnumberip-auth status
show global-protect-portal satellite-serialnumberip-auth status
Satellite Serialnumber + IP authentication feature status
show global-protect-portal summary {all | detail}
show global-protect-portal summary all
Show GlobalProtect portal all
show global-protect-portal summary detail
Show GlobalProtect portal detail
show global-protect-satellite {current-gateway | satellite}
show global-protect-satellite current-gateway
Show current GlobalProtect gateway connection infos
show global-protect-satellite satellite
Show list of GlobalProtect satellite configuration
show global-protect-satellite interface {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show global-protect-satellite interface all
Show all interfaces
show gp-broker {ipc-stat | panos-config}
show gp-broker ipc-stat
Show ipc counters
show gp-broker panos-config
Show current running config used in gpsvc
show gp-broker gpsvc {counter | task}
show gp-broker gpsvc version
Show gpsvc version
show gtp info
show gtp info
Show GTP information
show high-availability {all | flap-statistics | ha2_keepalive | link-monitoring | path-monitoring | session-reestablish-status | state | state-synchronization | transitions | virtual-address}
show high-availability all
Show high-availability pair information
show high-availability flap-statistics
Show high-availability pair preemptive/non-functional flap statistics
show high-availability ha2_keepalive
Show HA pair HA2 Keep-Alive statistics
show high-availability link-monitoring
Show link-monitoring state
show high-availability path-monitoring
Show path-monitoring statistics
show high-availability session-reestablish-status
Show high-availability pair session reestablishment status
show high-availability state
Show high-availability pair state information
show high-availability state-synchronization
Show HA pair state synchronization statistics
show high-availability transitions
Show high-availability pair transition statistic information
show high-availability virtual-address
Show HA pair Active-Active virtual address status
show high-availability cluster {session-synchronization | statistics}
show high-availability cluster all
Show cluster information
show high-availability cluster flap-statistics
Show high-availability cluster flap statistics
show high-availability cluster ha4-backup-status
Show cluster ha4 backup interface status
show high-availability cluster ha4-status
Show cluster ha4 interface status
show high-availability cluster state
Show cluster state and config information
show high-availability control-link statistics
show high-availability control-link statistics
Show HA pair control-link statistics
show high-availability interface {ha1 | ha1-backup | ha2 | ha2-backup | ha3 | ha4 | ha4-backup}
show high-availability interface ha1
Show HA pair interface ha1
show high-availability interface ha1-backup
Show HA pair interface ha1-backup
show high-availability interface ha2
Show HA pair interface ha2
show high-availability interface ha2-backup
Show HA pair interface ha2-backup
show high-availability interface ha3
Show HA pair interface ha3
show high-availability interface ha4
Show HA cluster interface ha4
show high-availability interface ha4-backup
Show HA cluster interface ha4-backup
show hsm {client-address | client-version | client-version-list | ha-status | info | is-priv-key-on-hsm | nshield-connect-rfs | servers | slots | state}
show hsm client-address
Show HSM client ip address
show hsm client-version
Show configured HSM client version
show hsm client-version-list
Show available LUNASA client version
show hsm ha-status
Show HSM HA setting and members. Only valid for Luna SA
show hsm info
Show HSM info
show hsm is-priv-key-on-hsm
Query whether private key for a certificate is on HSM
show hsm nshield-connect-rfs
Show nshield-connect RFS info. Only valid for nShield Connect
show hsm servers
Show HSM registered servers
show hsm slots
Show HSM slots
show hsm state
Show HSM connection state
show interface {<value> | all | hardware | logical | management}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show interface all
Show all interface information
show interface hardware
Show all hardware interface information
show interface logical
Show all logical interface information
show interface management
Show management interface information
show iot export-device-inventory
show iot export-device-inventory
Export ip-devide-mapping inventory
show iot device-inventory {all | summmary}
show iot device-inventory all
Show devices inventory
show iot device-inventory summmary
Show device inventory summary
show iot dhcp-server {status}
show iot dp-quarantine-cache {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
show iot dp-quarantine-cache all
Show all devices
show iot dp-quarantine-cache ip <ip/netmask>
Show device info for IP address
show iot eal {dpi-stats}
show iot eal all
Show all counters
show iot eal conn
Show gRPC connection counters
show iot eal dhcp-syslog-eal
Show dhcp syslog counters
show iot eal dpi-eal
Show eal log counters
show iot eal hipreport-eal
Show hip report counters
show iot eal response-time
Show distribution of response time from cortex
show iot edit-device-inventory {id <value> | jobs}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> By id |
show iot edit-device-inventory id <value>
By id
show iot edit-device-inventory jobs
All jobs
show iot host-cache {all | hostid <value>}
| Parameter | Description |
|---|---|
<value> |
hostid of a device |
show iot host-cache all
Show all devices
show iot host-cache hostid <value>
hostid of a device
show iot icd {statistics}
show iot icd version
Show ICD version
show iot ip-device-mapping {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
show iot ip-device-mapping all
Show all devices
show iot ip-device-mapping ip <ip/netmask>
Show device info for IP address
show iot ip-device-mapping-mp {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
show iot ip-device-mapping-mp all
Show all devices
show iot ip-device-mapping-mp ip <ip/netmask>
Show device info for IP address
show jobs {all | id <value> | pending | processed}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> By id |
show jobs all
All jobs
show jobs id <value>
By id
show jobs pending
Pending jobs
show jobs processed
Completed/active jobs
show lldp config {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show lldp config all
Show all LLDP-enabled interfaces
show lldp counters {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show lldp counters all
Show all LLDP-enabled interfaces
show lldp local {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show lldp local all
Show all LLDP-enabled interfaces
show lldp neighbors {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show lldp neighbors all
Show all LLDP-enabled interfaces
show location ip <ip>
| Parameter | Description |
|---|---|
<ip> |
<ip> |
show location ip <ip>
By IP address
show log {alarm | appstat | auth | config | corr | corr-categ | corr-detail | dailydesum | dailygtpsum | dailysctpsum | dailythsum | dailytrsum | dailyurlsum | data | decryption | desum | globalprotect | gtp | gtpsum | hipmatch | hourlydesum | hourlygtpsum | hourlysctpsum | hourlythsum | hourlytrsum | hourlyurlsum | iptag | mdm | sctp | sctpsum | system | threat | thsum | trace | traffic | trsum | tunnel | url | urlsum | userid | weeklydesum | weeklygtpsum | weeklysctpsum | weeklythsum | weeklytrsum | weeklyurlsum | wildfire}
show log alarm
Show alarm logs
show log appstat
Show appstat logs
show log auth
Show authentication logs
show log config
Show config logs
show log corr
Show correlation object event logs
show log corr-categ
Show correlation event category logs
show log corr-detail
Show correlation event detailed information
show log dailydesum
Show dailydesum logs
show log dailygtpsum
Show daily tunnel and gtp summary logs
show log dailysctpsum
Show daily sctp summary logs
show log dailythsum
Show dailythsum logs
show log dailytrsum
Show dailytrsum logs
show log dailyurlsum
Show dailyurlsum logs
show log data
Show data logs
show log decryption
Show decryption logs
show log desum
Show desum logs
show log globalprotect
Show globalprotect logs
show log gtp
Show GTP logs
show log gtpsum
Show tunnel and gtp summary logs
show log hipmatch
Show hipmatch logs
show log hourlydesum
Show hourlydesum logs
show log hourlygtpsum
Show hourly tunnel and gtp summary logs
show log hourlysctpsum
Show hourly sctp summary logs
show log hourlythsum
Show hourlythsum logs
show log hourlytrsum
Show hourlytrsum logs
show log hourlyurlsum
Show hourlyurlsum logs
show log iptag
Show iptag logs
show log mdm
Show mdm logs
show log sctp
Show SCTP logs
show log sctpsum
Show sctp summary logs
show log system
Show system logs
show log threat
Show threat logs
show log thsum
Show thsum logs
show log trace
Show trace logs
show log traffic
Show traffic logs
show log trsum
Show trsum logs
show log tunnel
Show Tunnel logs
show log url
Show url logs
show log urlsum
Show urlsum logs
show log userid
Show User-ID logs
show log weeklydesum
Show weeklydesum logs
show log weeklygtpsum
Show weekly tunnel and gtp summary logs
show log weeklysctpsum
Show weekly sctp summary logs
show log weeklythsum
Show weeklythsum logs
show log weeklytrsum
Show weeklytrsum logs
show log weeklyurlsum
Show weeklyurlsum logs
show log wildfire
Show wildfire logs
show log-collector preference-list
show log-collector preference-list
Show list of log collectors in preference order
show logrcvr ip-cache
show logrcvr ip-cache
Show IP cache entry
show logrcvr offline-logpurger {interval | percentage-threshold}
show logrcvr offline-logpurger interval
Show interval period for offline purger
show logrcvr offline-logpurger percentage-threshold
Show percentage threshold for offline purger
show mac {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<dot1q-vlan name> Show specific vlan MAC information |
show mac all
Show all MAC information
show macsec
Invalid syntax.show macsec association interface <value>
| Parameter | Description |
|---|---|
<value> |
Show for given MACSec interface |
show macsec association interface <value>
Show for given MACSec interface | Pipe through a command
show macsec stats interface <value>
| Parameter | Description |
|---|---|
<value> |
Show for given MACSec interface |
show macsec stats interface <value>
Show for given MACSec interface | Pipe through a command
show management-server {candidate | last-committed}
show management-server candidate
Show candidate config related information
show management-server last-committed
Show last-committed config related information
show mlav {cloud-status | lookup-cache | meta-data | mlav-info | request-stats}
show mlav cloud-status
Show mlav cloud info
show mlav lookup-cache
Show MLAV MP lookup cache
show mlav meta-data
Show meta data got from cloud
show mlav mlav-info
Show mlav info on device
show mlav request-stats
Show allow list request statistics
show neighbor
Invalid syntax.show neighbor interface {<value> | all | management}
| Parameter | Description |
|---|---|
<value> |
Specify an Interface Name |
show neighbor interface all
all
show neighbor interface management
management
show neighbor ndp-monitor {<value> | all}
| Parameter | Description |
|---|---|
<value> |
Specify an Interface Name |
show neighbor ndp-monitor all
all
show net-inspection {details | exempt | status}
show net-inspection details
net inspection general information
show net-inspection exempt
net inspection exempted IP lists
show net-inspection status
net inspection status
show net-inspection evaluator {index <value> | zone <value>}
| Parameter | Description |
|---|---|
<value> |
<0-65535> |
show net-inspection evaluator index <value>
index
show net-inspection evaluator zone <value>
zone name | Pipe through a command
show net-inspection filter {index <value> | rule-name <value> | zone <value>}
| Parameter | Description |
|---|---|
<value> |
<0-65535> |
show net-inspection filter index <value>
index
show net-inspection filter rule-name <value>
rule-name
show net-inspection filter zone <value>
zone name | Pipe through a command
show object static
show object static
IP to object name
show object dynamic-address-group {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
Show dynamic address group by name |
show object dynamic-address-group all
Show all dynamic address groups
show object dynamic-address-group name <value>
Show dynamic address group by name
show object registered-ip {tag}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
<ip-range> |
<ip1-ip2> |
show object registered-ip all
Display all registered addresses
show object registered-ip ip <ip/netmask>
Display registered address matches given IP
show object registered-ip iprange <ip-range>
Display registered address matches given IP-Range
show object registered-user {tag}
| Parameter | Description |
|---|---|
<value> |
Display registered user matches given name |
show object registered-user all
Display all registered users
show object registered-user user <value>
Display registered user matches given name
show parent-info {all | filter | info}
show parent-info all
Show database
show parent-info filter
Apply parent-info filters
show parent-info info
Show database info
show pbf
Invalid syntax.show pbf return-mac {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
name value |
show pbf return-mac all
Show all PBF return mac
show pbf return-mac name <value>
name
show pbf rule {all | name <value>}
| Parameter | Description |
|---|---|
<value> |
name value |
show pbf rule all
Show all PBF rules
show pbf rule name <value>
name
show plugins {auto-upgrade | dependencies | installed | mandatory | packages}
show plugins auto-upgrade
auto-upgrade
show plugins dependencies
show plugin dependencies
show plugins installed
installed
show plugins mandatory
mandatory
show plugins packages
packages
show plugins openconfig {bridge | bundling | connections | info | model-stats | streaming_telemetry | subscriptions | subscriptions-detail}
show plugins vm_series {aws | azure | info}
show plugins vm_series cloud-logging
Show periodic interval for cloud logging.
show plugins vm_series cores
cores
show plugins vm_series dp-cores
dp-cores
show plugins vm_series dpdk-mbuf-cfg
dpdk-mbuf-cfg
show plugins vm_series numa-perf-optimize
Show NUMA performance optimization
show plugins vm_series offline-license-status
Show Offline License Status
show plugins vm_series oss-license
oss-license
show plugins vm_series packet-mirroring
Show Packet mirroring mode
show plugins vm_series pktmmap-ring-size
Show pktmmap ring size.
show policy-recommendation {iot | saas}
show policy-recommendation iot
Show IoT policy recommendation
show policy-recommendation saas
Show SAAS policy recommendation
show pppoe
Invalid syntax.show pppoe inherited state
show pppoe inherited state
Show Inherited Interface IPv6 details
show pppoe interface {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show pppoe interface all
Show all interfaces
show pppoe ipv6 {interface | pool-details}
show pppoe ipv6 prefix
Show PPPoE IPv6 Client prefix pool state
show predefined {application-filter <name> | application-group <name> | certificate | default-security-rules | profile-group <name> | service-group <name> | sig-default | ssl-tls-service-profile}
| Parameter | Description |
|---|---|
<name> |
<name> | Pipe through a command |
show predefined application-filter <name>
application-filter
show predefined application-group <name>
application-group
show predefined certificate
certificate
show predefined default-security-rules
default-security-rules
show predefined profile-group <name>
profile-group
show predefined service-group <name>
service-group
show predefined sig-default
sig-default
show predefined ssl-tls-service-profile
ssl-tls-service-profile
show query {corr-detail | jobs | result | stats}
show query corr-detail
Query corr detail job
show query jobs
All jobs
show query result
All jobs
show query stats
Get Query stats
show query effective-queries logtypes <value>
| Parameter | Description |
|---|---|
<value> |
member value |
show query effective-queries logtypes <value>
logtypes | Pipe through a command
show redistribution
Invalid syntax.show redistribution agent {state}
show redistribution agent statistics
Show redistribution-agent statistics
show redistribution service {client}
show redistribution service status
Show redistribution service status
show report {custom | directory-listing | id <value> | jobs | predefined}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> By id |
show report custom
custom
show report directory-listing
directory-listing
show report id <value>
By id
show report jobs
All jobs
show report predefined
predefined
show report cache {cache_id <value> | info}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> By cache entry id |
show report cache cache_id <value>
By cache entry id
show report cache info
info
show report exec_mgr {batch_id <value> | info}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> By batch id |
show report exec_mgr batch_id <value>
By batch id
show report exec_mgr info
info
show resiliency {dbsize | key-hash | statistics | status}
show resiliency dbsize
Show number of entries in redis
show resiliency key-hash
Show Statistics of Resiliency
show resiliency statistics
Show Statistics of Resiliency
show resiliency status
Show status of Resiliency
show resource
Invalid syntax.show resource limit {policies | session | ssl-vpn | vpn}
show resource limit policies
Show resource limit of policies
show resource limit session
Show resouce limit of session
show resource limit ssl-vpn
Show resouce limit of ssl vpn tunnels
show resource limit vpn
Show resouce limit of site to site vpn tunnels
show routing {fib | interface | path-monitor | resource | route | summary}
show routing fib
Show forwarding table entries
show routing interface
Show interface status
show routing path-monitor
show route path-monitor
show routing resource
Show resource usage
show routing route
Show route entries
show routing summary
Show summary information
show routing bfd {active-profile | details | drop-counters | summary}
show routing bfd active-profile
Show active BFD profiles
show routing bfd details
Show detailed BFD session entries
show routing bfd drop-counters
Show BFD session drop counters
show routing bfd summary
Show summary BFD session entries
show routing multicast {igmp | pim}
show routing multicast fib
Show multicast fib entries
show routing multicast group-permission
Show multicast group permission
show routing multicast route
Show multicast route entries
show routing protocol {bgp | ospf | ospfv3 | redist | rip}
show running {appinfo2ip | application-override-policy | application-override-policy-addresses | application-signature | authentication-policy | authentication-policy-addresses | decryption-policy | decryption-policy-addresses | dos-policy | dos-policy-addresses | global-ippool | ippool | ipv6 | logging | ml-form-cache | ml-lookup-cache | mlav-model | nat-persistent-dipp | nat-policy | nat-policy-addresses | nat-rule-cache | nat-rule-ippool | ndp-proxy | npb-policy | pbf-policy | pbf-policy-addresses | persistent-dipp-client-translation | qos-policy | qos-policy-addresses | sdwan-policy | sdwan-policy-addresses | security-policy | security-policy-addresses | ssl-cert-cn | tcp | tunnel | tunnel-inspect-policy | tunnel-inspect-policy-addresses | url <value> | url-info <value> | url-license}
| Parameter | Description |
|---|---|
<value> |
Show the category of the URL as in the url-cache |
show running appinfo2ip
Show application-specific IP mapping information
show running application-override-policy
Show currently deployed application override policy
show running application-override-policy-addresses
Show addresses in currently deployed application override policy
show running application-signature
Show application signature statistics
show running authentication-policy
Show currently deployed authentication policy
show running authentication-policy-addresses
Show addresses in currently deployed authentication policy
show running decryption-policy
Show currently deployed decryption policy
show running decryption-policy-addresses
Show addresses in currently deployed decryption policy
show running dos-policy
Show currently deployed DoS policy
show running dos-policy-addresses
Show addresses in currently deployed dos policy
show running global-ippool
Show global ippool status
show running ippool
Show ippool usage
show running ipv6
Show IPv6 information
show running logging
Show log and packet logging rate
show running ml-form-cache
Show running MLAV form cache
show running ml-lookup-cache
Show running MLAV lookup cache
show running mlav-model
Show running mlav model info
show running nat-persistent-dipp
Show NAT persistent DIPP
show running nat-policy
Show currently deployed NAT policy
show running nat-policy-addresses
Show addresses in currently deployed nat policy
show running nat-rule-cache
Show all NAT rules of all versions in cache
show running nat-rule-ippool
Show specified NAT rule ippool usage
show running ndp-proxy
Show currently deployed ndp-proxy settings
show running npb-policy
Show currently deployed network-packet-broker policy
show running pbf-policy
Show currently deployed Policy-Based forwarding policy
show running pbf-policy-addresses
Show addresses in currently deployed pbf policy
show running persistent-dipp-client-translation
Show NAT port translation for a specific IP
show running qos-policy
Show currently deployed QoS policy
show running qos-policy-addresses
Show addresses in currently deployed qos policy
show running sdwan-policy
Show currently deployed SDWAN forwarding policy
show running sdwan-policy-addresses
Show addresses in currently deployed sdwan policy
show running security-policy
Show currently deployed security policy
show running security-policy-addresses
Show addresses in currently deployed security policy
show running ssl-cert-cn
Show ssl certificate common name cache
show running tcp
Show tcp reassembly setup
show running tunnel
Show runtime tunnel states
show running tunnel-inspect-policy
Show currently deployed tunnel-inspect policy
show running tunnel-inspect-policy-addresses
Show addresses in currently deployed tci policy
show running url <value>
Show the category of the URL as in the url-cache
show running url-info <value>
Show categorization details of the URL as in the url-cache
show running url-license
Show url license information
show running application {cache | disabled | setting | statistics}
show running application cache
cache
show running application disabled
Show disabled applications
show running application setting
setting
show running application statistics
statistics
show running dns-cache statistics
show running dns-cache statistics
Show dns-cache statistics
show running ml-block-cache {top | url <value>}
| Parameter | Description |
|---|---|
<value> |
Show if the specified URL is in the MLAV block cache |
show running ml-block-cache top
Show the top URLs in the MLAV block cache
show running ml-block-cache url <value>
Show if the specified URL is in the MLAV block cache
show running network-packet-broker {statistics | status}
show running network-packet-broker statistics
View Network Packet Broker Statistics
show running network-packet-broker status
View Network Packet Broker Monitor Status
show running persistent-dipp-client {ip-utilization | pool <value>}
| Parameter | Description |
|---|---|
<value> |
<0-65535> NAT pool index |
show running persistent-dipp-client ip-utilization
Show IP utilization
show running persistent-dipp-client pool <value>
NAT pool index
show running persistent-dipp-pool ip-utilization
show running persistent-dipp-pool ip-utilization
Show IP utilization | Pipe through a command
show running resource-monitor {day | hour | minute | second | week}
show running resource-monitor day
Per-day monitoring statistics
show running resource-monitor hour
Per-hour monitoring statistics
show running resource-monitor minute
Per-minute monitoring statistics
show running resource-monitor second
Per-second monitoring statistics
show running resource-monitor week
Per-week monitoring statistics | Pipe through a command
show running rule-use {highlight | hit-count}
show running rule-use highlight
Show used/non-used policy rules
show running rule-use hit-count
Show hit count of rules
show running url-cache {all | statistics}
show running url-cache all
Show all URLS in url-cache
show running url-cache statistics
Show url-cache statistics
show sctp {all | id <value> | info}
| Parameter | Description |
|---|---|
<value> |
<1-72057594037927935> Show specific SCTP association information |
show sctp all
Show active SCTP associations
show sctp id <value>
Show specific SCTP association information
show sctp info
Show SCTP statistics
show sdwan event
show sdwan event
Show SD-WAN related events
show sdwan connection {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show sdwan connection all
Show SD-WAN connection information
show sdwan details {conn | fec-de | fec-en | pd | rule | session | vif}
show sdwan details basic
Show SD-WAN basic information
show sdwan path-monitor {dia-anypath | parameter | stats}
show sdwan path-monitor details
sdwan detailed stats
show sdwan path-monitor policy-map
sdwan policy map to connection idx
show sdwan pool details
show sdwan pool details
Show SD-WAN detailed shared resource usage | Pipe through a command
show sdwan rule {vif}
show sdwan session {log}
show sdwan session distribution
path selection
show sdwan session path-select
path selection
show secure-web-gateway {log-level | stats}
show secure-web-gateway log-level
Show current log level
show secure-web-gateway stats
Show secure web gateway stats
show service-chain counter
show service-chain counter
Service chain configuration counter
show service-chain zone-mapping all
show service-chain zone-mapping all
Show all service chain information
show session {all | change-smac-in-resp | id <value> | inflight_monitoring | info | ingress_backlogs_duration | ingress_backlogs_threshold | ingress_backlogs_trigger | meter | packet-buffer-protection | rematch | tcp-retransmit-scan | tcp-tfo-app}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Show specific session information |
show session all
Show active sessions
show session change-smac-in-resp
Use port mac as smac in fw generated responses
show session id <value>
Show specific session information
show session inflight_monitoring
Show inflight monitoring mode
show session info
Show session statistics
show session ingress_backlogs_duration
Show ingress_backlogs_duration
show session ingress_backlogs_threshold
Show ingress_backlogs_threshold
show session ingress_backlogs_trigger
Show ingress_backlogs_trigger status
show session meter
Show session metering statistics
show session packet-buffer-protection
Show packet buffer protection statistics
show session rematch
Show rematch statistics
show session tcp-retransmit-scan
Show tcp-retransmit-scan mode
show session tcp-tfo-app
Show tcp-tfo-app mode
show session cache {all | external | md5 <value>}
| Parameter | Description |
|---|---|
<value> |
Show session cache by MD5 |
show session cache all
Show current session cache entries
show session cache external
Check external session cache for hash
show session cache md5 <value>
Show session cache by MD5
show session distribution {policy | statistics}
show session distribution policy
session distribution information
show session distribution statistics
Show session disribution statistics
show sp-metadata {captive-portal | global-protect | management}
show sp-metadata captive-portal
Captive portal SAML sp metadata
show sp-metadata global-protect
Global Protect SAML sp metadata
show sp-metadata management
Admin WebUI SAML sp metadata
show ssl-conn-on-cert {fail-all-conns | fail-syslog-conns}
show ssl-conn-on-cert fail-all-conns
fail all ssl connections on cert
show ssl-conn-on-cert fail-syslog-conns
fail syslog connection on cert
show sslmgr-store {config-ca-certificate | config-certificate-info | satellite-info}
show sslmgr-store config-ca-certificate
Show list of config CA certificate
show sslmgr-store config-certificate-info
Show list of config certificate status
show sslmgr-store satellite-info
Show list of registered satellites
show sslmgr-store certificate-info {issuer <value> | portal}
| Parameter | Description |
|---|---|
<value> |
Show all certificate status information signed by isssuer |
show sslmgr-store certificate-info issuer <value>
Show all certificate status information signed by isssuer
show sslmgr-store certificate-info portal
GlobalProtect portal | Pipe through a command
show sslmgr-store serialno-certificate-info db-serialno <value>
| Parameter | Description |
|---|---|
<value> |
Certificate serial number |
show sslmgr-store serialno-certificate-info db-serialno <value>
Certificate serial number | Pipe through a command
show streaming-telemetry region-list
show streaming-telemetry region-list
Show device telemetry regions
show system {disk-space | files | info | last-commit-info | logdb-quota | masterkey-properties | pancfg-directory-usage | resources | services}
show system disk-space
Report filesystem disk space usage
show system files
List important files in the system
show system info
System information
show system last-commit-info
System last commit detail information
show system logdb-quota
Report logdb quotas
show system masterkey-properties
Master key properties
show system pancfg-directory-usage
List directory usage in the pancfg partition with max-depth three
show system resources
System resources
show system services
System services
show system bootstrap status
show system bootstrap status
Show product bootstrap status
show system environmentals {fans | power | slot | thermal}
show system setting {ctd | ssl-decrypt | url-cache}
show system setting alg-natref
Show ALG natref setting
show system setting alg-persist-nat
Show ALG persistent NAT setting
show system setting appid-match
appid match mode
show system setting arp-cache-timeout
Show ARP cache timeout interval, in seconds
show system setting captive-portal-workers
Show Captive Portal workers number
show system setting ctd-mode
CTD mode
show system setting delay-interface-process
Show Interface status change delay processing
show system setting dpdk-pkt-io
Packet IO mode
show system setting fast-fail-over
Show E-BGP Fast External Fail Over setting
show system setting icmp6-error
ICMPv6 Error messages enabled/disabled
show system setting ip6-defrag-timeout
IPv6 defragmentation timeout in seconds
show system setting jumbo-frame
Jumbo-Frame mode
show system setting logging
Show log and packet logging rate
show system setting mp-memory-monitor
Show monitoring of management memory
show system setting mp-vr-vif-install-only-host-route
Show Flag setting Install only Host Route on VR VIF
show system setting multi-vsys
Multiple virtual system mode
show system setting packet
Show packet
show system setting packet-descriptor-monitor
Show monitoring of packet descriptors
show system setting pow
Show pow
show system setting rip-poison-reverse
Show global RIP Poison Reverse setting
show system setting rule-hit-count
Rule hit count feature enabled or disabled
show system setting shared-policy
Shared policy status
show system setting target-vsys
Target vsys for operational commands
show system setting template
Template status
show system setting url-database
URL database
show system setting util
Show util
show system setting zip
Show zip
show system software status
show system software status
Status information
show system state {browser | filter <value> | filter-pretty <value>}
| Parameter | Description |
|---|---|
<value> |
Filter by subtree/wildcard |
show system state browser
Navigate in a text-mode browser
show system state filter <value>
Filter by subtree/wildcard
show system state filter-pretty <value>
Filter by subtree/wildcard w/ pretty printing | Pipe through a command
show system statistics {application | session}
show system statistics application
Show application statistics
show system statistics session
Show session statistics
show system ztp status
show system ztp status
Show status of ztp bootstrap
show transceiver {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show transceiver all
Show all Front Panel interfaces
show transceiver-detail {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show transceiver-detail all
Show all Front Panel interfaces
show transceiver-eeprom {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
show transceiver-eeprom all
Show all Front Panel interfaces
show transceiver-monitor-rate {<value> | s1}
| Parameter | Description |
|---|---|
<value> |
<name> slot number |
show transceiver-monitor-rate s1
s1
show ueip {active-imsi | address <ip> | all | info}
| Parameter | Description |
|---|---|
<ip> |
<ip> |
show ueip active-imsi
Unique IMSIs
show ueip address <ip>
UEIP address
show ueip all
All UEIP entries (up to 512)
show ueip info
UEIP Info
show url-cloud status
show url-cloud status
Show url-cloud info
show user {email-lookup | hip-report | local-user-db | user-attributes}
show user email-lookup
Lookup user-id user for given email addresses
show user hip-report
Show HIP report
show user local-user-db
Deprecated by: show authentication local-user-db
show user user-attributes
Show users and all attributes
show user cloud-identity-engine {statistics | status}
show user cloud-identity-engine client
Show cloud identity engine client
show user credential-filter {group-mapping | statistics}
show user credential-filter group-mapping
Show Group-Mapping usernames and profile IDs for a vsys
show user credential-filter statistics
Show credential enforcement filter statistics
show user group {list}
| Parameter | Description |
|---|---|
<value> |
Show group's members |
show user group name <value>
Show group's members
show user group-mapping {state}
show user group-mapping naming-context
Show naming context for directory server
show user group-mapping statistics
Show group mapping statistics
show user group-mapping-service {query}
show user group-mapping-service status
Show group-mapping service status
show user group-policy-dp {all | any-user | gid <value> | known-user | unknown-user}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Show user group policy data for a group |
show user group-policy-dp all
Show all user group policy data
show user group-policy-dp any-user
Show user group policy data for group any-user
show user group-policy-dp gid <value>
Show user group policy data for a group
show user group-policy-dp known-user
Show user group policy data for group known-user
show user group-policy-dp unknown-user
Show user group policy data for group unknown-user | Pipe through a command
show user group-selection {server}
| Parameter | Description |
|---|---|
<value> |
<0-65535> |
show user group-selection server-port <value>
ldap server listening port
show user ip-port-user-mapping {all | ip <ip/netmask> | source-user <value>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
<value> |
Show terminal server agent data for user |
show user ip-port-user-mapping all
Show all terminal server agents data
show user ip-port-user-mapping ip <ip/netmask>
Show terminal server agent data for IP address
show user ip-port-user-mapping source-user <value>
Show terminal server agent data for user | Pipe through a command
show user ip-port-user-mapping-mp {all | ip <ip/netmask> | source-user <value>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
<value> |
Show mp terminal server agent data for user |
show user ip-port-user-mapping-mp all
Show all mp terminal server agents data
show user ip-port-user-mapping-mp ip <ip/netmask>
Show mp terminal server agent data for IP address
show user ip-port-user-mapping-mp source-user <value>
Show mp terminal server agent data for user | Pipe through a command
show user ip-user-mapping {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
show user ip-user-mapping all
Show all user/groups
show user ip-user-mapping ip <ip/netmask>
Show user/group info for IP address
show user ip-user-mapping-mp {all | ip <ip/netmask>}
| Parameter | Description |
|---|---|
<ip/netmask> |
<ip/netmask> |
show user ip-user-mapping-mp all
Show all user/groups
show user ip-user-mapping-mp ip <ip/netmask>
Show user/group info for IP address
show user ldap-device-serialno {all | serialno <value>}
| Parameter | Description |
|---|---|
<value> |
Show ldap device serial number database for hostid |
show user ldap-device-serialno all
Show all devices in ldap device serial number database
show user ldap-device-serialno serialno <value>
Show ldap device serial number database for hostid
show user server-monitor {state}
show user server-monitor auto-discover
Discover AD domain controllers
show user server-monitor statistics
Show server monitor statistics
show user ts-agent {state}
show user ts-agent statistics
Show terminal server agent statistics
show user uid2primeuid-dp {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Show uid-map cache data for a user |
show user uid2primeuid-dp all
Show all uid-map cache data
show user uid2primeuid-dp uid <value>
Show uid-map cache data for a user | Pipe through a command
show user user-cache-dp {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Show user cache data for a user |
show user user-cache-dp all
Show all user cache data
show user user-cache-dp uid <value>
Show user cache data for a user | Pipe through a command
show user user-id-agent {config | state}
show user user-id-agent statistics
Show user-id-agent statistics
show user user-id-service {client}
show user user-id-service ipuser-update-list
Show user-id service IP user update list
show user user-id-service status
Show user-id service status
show user user-ids {all | match-user <value>}
| Parameter | Description |
|---|---|
<value> |
Show only the user(s) that match the string |
show user user-ids all
Show all user/groups
show user user-ids match-user <value>
Show only the user(s) that match the string
show user user-policy-dp {all | uid <value>}
| Parameter | Description |
|---|---|
<value> |
<1-4294967295> Show user policy data for a user |
show user user-policy-dp all
Show all user group policy data
show user user-policy-dp uid <value>
Show user policy data for a user | Pipe through a command
show user xml-api multiusersystem
show user xml-api multiusersystem
Show multiusersytem statistics
show virtual-wire {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> virtual-wire name |
show virtual-wire all
Show all virtual wire information
show vlan {<value> | all}
| Parameter | Description |
|---|---|
<value> |
<name> vlan name |
show vlan all
Show all vlan information
show vm-monitor
show vm-monitor source {state}
| Parameter | Description |
|---|---|
<value> |
<name> source name |
show vm-monitor source all
all
show vm-monitor source source-name <value>
source-name
show vm-monitor source statistics
Show vm-info-source statistics
show vpn ike-hashurl
show vpn ike-hashurl
IKE Hash-and-url certificate cache information
show vpn flow {name <value> | tunnel-id <value>}
| Parameter | Description |
|---|---|
<value> |
Show for given VPN tunnel |
show vpn flow name <value>
Show for given VPN tunnel
show vpn flow tunnel-id <value>
Show specific tunnel information | Pipe through a command
show vpn gateway {match <value> | name <value>}
| Parameter | Description |
|---|---|
<value> |
if the name contains the string or not |
show vpn gateway match <value>
if the name contains the string or not
show vpn gateway name <value>
Show for given IKE gateway | Pipe through a command
show vpn ike-sa {detail}
| Parameter | Description |
|---|---|
<value> |
Show for given IKE gateway |
show vpn ike-sa gateway <value>
Show for given IKE gateway
show vpn ike-sa match <value>
if the name contains the string or not | Pipe through a command
show vpn ipsec-sa {match <value> | summary | tunnel <value>}
| Parameter | Description |
|---|---|
<value> |
if the name contains the string or not |
show vpn ipsec-sa match <value>
if the name contains the string or not
show vpn ipsec-sa summary
show a summary of all IPSec SAs
show vpn ipsec-sa tunnel <value>
Show for given VPN tunnel | Pipe through a command
show vpn tunnel {match <value> | name <value>}
| Parameter | Description |
|---|---|
<value> |
if the name contains the string or not |
show vpn tunnel match <value>
if the name contains the string or not
show vpn tunnel name <value>
Show for given VPN tunnel | Pipe through a command
show wildfire {cloud-info | disk-usage | file-size-limits | statistics | status | telemetry-statistics}
show wildfire cloud-info
cloud-info
show wildfire disk-usage
disk-usage
show wildfire file-size-limits
file-size-limits
show wildfire statistics
statistics
show wildfire status
status
show wildfire telemetry-statistics
telemetry-statistics
show wildfire-realtime-cache total
show wildfire-realtime-cache total
Show WildFire Realtime virus cache statistics
show wildfire-realtime-cache virus-pattern-type {ALL | Hash | PE}
show wildfire-realtime-cache virus-pattern-type ALL
All Virus patterns
show wildfire-realtime-cache virus-pattern-type Hash
Hash Virus pattern
show wildfire-realtime-cache virus-pattern-type PE
PE Virus pattern
ssh
tail {agent-log | mp-log | plugins-log | webserver-log}
tail agent-log
agent-log
tail mp-log
mp-log
tail plugins-log
plugins-log
tail webserver-log
webserver-log
target {set <value> | show}
| Parameter | Description |
|---|---|
<value> |
target device |
target set <value>
target device
target show
show
tcpdump
test {arp | authentication | authentication-policy-match | botnet | cookie-surrogate | custom-signature-perf | custom-signature-type | custom-url | decryption-policy-match | dos-policy-match | http-profile | http-profile-server-auth-token | http-server | mfa-vendors | nat-policy-match | nd | nptv6 | pbf-policy-match | qos-policy-match | security-policy-match | smtp-server | stats-service | tag-filter <value> | threat-vault | uid <ip/netmask> | url <value> | url-info-cloud <value> | url-info-host <value> | url-wpc <value> | x-authenticated-user}
| Parameter | Description |
|---|---|
<value> |
Test a tag-based filter |
<ip/netmask> |
<ip/netmask> |
test arp
ARP related
test authentication
Test User authentication
test authentication-policy-match
Test authentication policy match
test botnet
Test botnet domain categorization
test cookie-surrogate
cookie-surrogate query cache and policy lookup
test custom-signature-perf
Test lscan signature
test custom-signature-type
Test custom signature type
test custom-url
Test custom URL categorization
test decryption-policy-match
Test ssl policy match
test dos-policy-match
Test DoS Policy match
test http-profile
Test Http profile connection
test http-profile-server-auth-token
Test Http profile server auth token
test http-server
Test Http server connection
test mfa-vendors
Test MFA vendor connectivity
test nat-policy-match
Test nat policy match
test nd
IPv6 Neighbor Discovery
test nptv6
NPTv6 related commands
test pbf-policy-match
Test Policy Based forwarding match
test qos-policy-match
Test qos policy match
test security-policy-match
Test security policy match
test smtp-server
Test smtp server connection
test stats-service
Test statistics service
test tag-filter <value>
Test a tag-based filter
test threat-vault
Test threat-vault connection
test uid <ip/netmask>
Test uid unknown query
test url <value>
Test URL categorization
test url-info-cloud <value>
Return detailed information about the URL in the cloud
test url-info-host <value>
Return detailed information about the URL in the MP
test url-wpc <value>
Test Wildfire Private Cloud URL list
test x-authenticated-user
x-authenticated-user IP address match
test advanced-routing {bgp | fib-lookup | mfib-lookup}
test advanced-routing bgp
Refresh or Restart BGP Session
test advanced-routing fib-lookup
perform route lookup within active route table (fib)
test advanced-routing mfib-lookup
perform multicast route lookup within active multicast route table (mfib)
test advanced-routing multicast msdp
test advanced-routing multicast msdp
Restart MSDP Session
test data-filtering {ccn <value> | pattern <value> | ssn <value>}
| Parameter | Description |
|---|---|
<value> |
test credit card number |
test data-filtering ccn <value>
test credit card number
test data-filtering pattern <value>
pattern
test data-filtering ssn <value>
test social security number
test dns-proxy {ddns | dns-signature | fqdn | query}
test dns-proxy ddns
DDNS
test dns-proxy dns-signature
DNS Signature
test dns-proxy fqdn
FQDN
test dns-proxy query
Initiate DNS query
test generate-saml-url {captive-portal | global-protect | management}
test generate-saml-url captive-portal
Captive portal SAML client
test generate-saml-url global-protect
Global Protect SAML client
test generate-saml-url management
Admin WebUI SAML client
test global-protect-mdm
test global-protect-mdm hipreport request
test global-protect-mdm hipreport request
request user info based on mac
test global-protect-satellite {gateway-connect | gateway-disconnect | gateway-reconnect}
test global-protect-satellite gateway-connect
Trigger GlobalProtect satellite connects to gateways
test global-protect-satellite gateway-disconnect
Trigger GlobalProtect satellite disconnects from gateways
test global-protect-satellite gateway-reconnect
Trigger GlobalProtect satellite reconnects to gateways
test macsec association
test macsec association
negotiate MACSec
test pppoe {interface <value> | ipv6}
| Parameter | Description |
|---|---|
<value> |
<name> interface name |
test pppoe interface <value>
test pppoe connection for interface
test pppoe ipv6
Test PPPoE IPv6 Client details
test routing {bgp | fib-lookup | mfib-lookup | ospf | ospfv3}
test routing bgp
restart BGP session
test routing fib-lookup
perform route lookup within active route table (fib)
test routing mfib-lookup
perform multicast route lookup within active multicast route table (mfib)
test routing ospf
clear ospf neighbor
test routing ospfv3
clear ospfv3 neighbor
test scp-server-connection {confirm | initiate}
test scp-server-connection confirm
confirm
test scp-server-connection initiate
initiate
test ssl-exclude-list {predefined | shared | vsys}
test ssl-exclude-list predefined
Test hostname in predefined SSL Exclude list
test ssl-exclude-list shared
Test hostname in shared SSL Exclude list
test ssl-exclude-list vsys
Test hostname in vsys SSL Exclude list
test user-id custom-group
test user-id custom-group
Test User Id Custom Group
test user-id user-id-syslog-parse {field-identifier | regex-identifier}
test user-id user-id-syslog-parse field-identifier
identifier based on strings
test user-id user-id-syslog-parse regex-identifier
identifier based on regex
test vpn {ike-sa | ipsec-sa}
test vpn ike-sa
only negotiate IKE SA
test vpn ipsec-sa
negotiate IPSec SA (and IKE SA when necessary)
test wildfire registration
test wildfire registration
test wildfire cloud registration and connection
tftp
tftp export {application-block-page | application-pcap | captive-portal-text | configuration | crl | debug-pcap | device-state | dnsproxy | file-block-continue-page | file-block-page | filter-pcap | global-protect-portal-custom-help-page | global-protect-portal-custom-home-page | global-protect-portal-custom-login-page | global-protect-portal-custom-welcome-page | high-availability-key | inbound-proxy-key | license-token-file | mfa-login-page | mgmt-pcap | ssl-cert-status-page | ssl-optout-text | stats-dump | tech-support | telemetry-data | threat-pcap | url-block-page | url-coach-text | virus-block-page | web-interface-certificate}
tftp export application-block-page
Use tftp to export application block comfort page
tftp export application-pcap
Use tftp to export application packet capture
tftp export captive-portal-text
Use tftp to export captive portal text
tftp export configuration
Use tftp to export configuration
tftp export crl
Use tftp to export crl.tgz
tftp export debug-pcap
Use tftp to export packet capture generated for purpose of debugging daemons
tftp export device-state
Use tftp to export device state
tftp export dnsproxy
Use tftp to export dnsproxy file
tftp export file-block-continue-page
Use tftp to export file block continue comfort page
tftp export file-block-page
Use tftp to export file block comfort page
tftp export filter-pcap
Use tftp to export filter packet capture
tftp export global-protect-portal-custom-help-page
Use tftp to export global protect help page
tftp export global-protect-portal-custom-home-page
Use tftp to export GlobalProtect portal custom home page
tftp export global-protect-portal-custom-login-page
Use tftp to export global protect login page
tftp export global-protect-portal-custom-welcome-page
Use tftp to export global protect welcome page
tftp export high-availability-key
Use tftp to export high-availability peer encryption key
tftp export inbound-proxy-key
Use tftp to export inbound proxy key
tftp export license-token-file
Use tftp to export deactivate license token file
tftp export mfa-login-page
Use tftp to export MFA login page
tftp export mgmt-pcap
Use tftp to export packet capture from management interface
tftp export ssl-cert-status-page
Use tftp to export ssl cert revoked notify page
tftp export ssl-optout-text
Use tftp to export ssl optout text
tftp export stats-dump
Use tftp to export AVR report data (default is last 7 days)
tftp export tech-support
Use tftp to export tech support info
tftp export telemetry-data
Use tftp to export sent telemetry data
tftp export threat-pcap
Use tftp to export threat packet capture
tftp export url-block-page
Use tftp to export url block comfort page
tftp export url-coach-text
Use tftp to export url coach text
tftp export virus-block-page
Use tftp to export virus block comfort page
tftp export web-interface-certificate
Use tftp to export web-interface-certificate
tftp export core-file {large-corefile | management-plane}
tftp export core-file large-corefile
Use tftp to export large core files in logdb
tftp export core-file management-plane
Use tftp to export management-plane core-file
tftp export log-file management-plane
tftp export log-file management-plane
Use tftp to export management-plane log-file
tftp import {anti-virus | application-block-page | captive-portal-text | certificate | configuration | content | credential-block-page | credential-coach-text | data-filter-block-page | device-state | file-block-continue-page | file-block-page | global-protect-client | global-protect-portal-custom-help-page | global-protect-portal-custom-home-page | global-protect-portal-custom-login-page | global-protect-portal-custom-welcome-page | high-availability-key | keypair | license | mfa-login-page | pandb-url-database | private-key | safe-search-block-page | signed-url-database | software | ssl-cert-status-page | ssl-optout-text | url-block-page | url-coach-text | url-database | virus-block-page | wildfire}
tftp import anti-virus
Use tftp to import anti-virus content
tftp import application-block-page
Use tftp to import application block comfort page
tftp import captive-portal-text
Use tftp to import captive portal text
tftp import certificate
Use tftp to import X.509 certificate
tftp import configuration
Use tftp to import configuration
tftp import content
Use tftp to import database content
tftp import credential-block-page
Use tftp to import credential enforcement block comfort page
tftp import credential-coach-text
Use tftp to import credential enforcement coach text
tftp import data-filter-block-page
Use tftp to import data filter block comfort page
tftp import device-state
Use tftp to import device state
tftp import file-block-continue-page
Use tftp to import file block continue comfort page
tftp import file-block-page
Use tftp to import file block comfort page
tftp import global-protect-client
Use tftp to import globalProtect client package
tftp import global-protect-portal-custom-help-page
Use tftp to import GlobalProtect portal custom help page
tftp import global-protect-portal-custom-home-page
Use tftp to import GlobalProtect portal custom home page
tftp import global-protect-portal-custom-login-page
Use tftp to import GlobalProtect portal custom login page
tftp import global-protect-portal-custom-welcome-page
Use tftp to import GlobalProtect portal custom welcome page
tftp import high-availability-key
Use tftp to import high-availability peer encryption key
tftp import keypair
Use tftp to import X.509 key
tftp import license
Use tftp to import license file
tftp import mfa-login-page
Use tftp to import MFA login page
tftp import pandb-url-database
Use tftp to import pandb url database package
tftp import private-key
Use tftp to import ssl private key
tftp import safe-search-block-page
Use tftp to import safe search block comfort page
tftp import signed-url-database
Use tftp to import signed url database package
tftp import software
Use tftp to import software package
tftp import ssl-cert-status-page
Use tftp to import ssl cert revoked notify page
tftp import ssl-optout-text
Use tftp to import ssl optout text
tftp import url-block-page
Use tftp to import url block comfort page
tftp import url-coach-text
Use tftp to import url coach text
tftp import url-database
Use tftp to import url database package
tftp import virus-block-page
Use tftp to import virus block comfort page
tftp import wildfire
Use tftp to import wildfire content
traceroute
view-pcap {application-pcap | debug-pcap | filter-pcap | mgmt-pcap | threat}
view-pcap application-pcap
YYYYMMDD/filename
view-pcap debug-pcap
packet capture generated for purpose of debugging daemons
view-pcap filter-pcap
YYYYMMDD/filename
view-pcap mgmt-pcap
packet capture generated from management interface
view-pcap threat
pcap id