Table of Contents

Palo Alto Networks (PAN)

So much better than Cisco firewalls. I didn't care for the Panorama management system.

CLI Commands

Set Mode

The command to enable set mode is: 

set cli config-output-format set

IIRC, this changes the CLI to show “set” commands instead of json config files. Much more human readable.

Piping with multiple matches

When piping to filter output you can use quotes and an escaped pipe (|) to search for multiple statements: 

show network interface | match "ip \|comment"

Show Inventory

show system info

Resources

* [https://blog.webernetz.net/cli-commands-for-troubleshooting-palo-alto-firewalls/ CLI Commands for Troubleshooting Palo Alto Firewalls]