CLI commands, hardware references, release guides, and support links for Palo Alto Networks administrators.
Helpful Links
Hardware
- Product Comparison
- Product Summary [PDF]
- Hardware End-of-Life Dates
- Interface and Transceiver Specs [PDF]
Common CLI Commands
> indicates operational mode; # indicates configuration mode. Copy buttons omit the prompt. Replace values in angle brackets with your own values before running them.
-
Enter configuration mode
configure -
Restart the device
request restart system -
Ping a destination
ping host <destination> -
Ping a destination from a particular interface IP
ping host <destination> source <interface ip> -
Find command by keyword
find command keyword <keyword> -
Show device information
show system info -
Show all jobs
show jobs all -
Show a particular job
show jobs id <id> -
Set the management interface to use a static IP
set deviceconfig system type static set deviceconfig system ip-address <ip-address> netmask <netmask> default-gateway <default-gateway> -
Commit changes
commit -
Fetch licenses from the support portal
request license fetch -
Show all licenses
request license info -
Delete all licenses
delete license key *.key -
Show the running route table
show routing route -
Show the forwarding table
show routing fib -
Test routing for a destination
test routing fib-lookup ip <destination> virtual-router <virtual router> -
Show all interfaces
show interface all -
Show interface details and counters
show interface <name> -
Show all ARP entries
show arp all -
Show ARP entries for a particular interface
show arp <interface> -
Display settings in set command format when show
set cli config-output-format set -
Show global system counters
show counter global -
Show global counters that have changed since last run
show counter global filter delta yes -
Show global counters that match the current packet capture filters
show counter global filter packet-filter yes -
Test an IKE gateway (phase 1)
test vpn ike-sa gateway <name> -
Test an IPSec tunnel (phase 1 & 2)
test vpn ipsec-sa tunnel <name> -
Show installed transciever details for interface (>= 10.0.0 only)
show transceiver-detail <interface> -
Show installed transciever details for X slot and Y port
show system state filter sys.sX.pY.phy -
Disable ZTP mode
request disable-ztp -
Show active session information
show system statistics session -
Show per-application session stats
show system statistics application -
Test a URL's categorization
test url <URL> -
Show all attributes for users with group mapping
show user user-attributes user all
Release Guides
Release notes: 12.2, 12.1, 11.2, 11.1.
| Version | Guides |
|---|---|
| 11.1 & Later (11.2, 12.1, 12.2) | Administration Panorama GlobalProtect XML API CLI |
| 11.0 | Administration Panorama GlobalProtect XML API CLI |
| 10.2 | Administration Panorama GlobalProtect XML API CLI |
| 10.1 | Administration Panorama GlobalProtect XML API CLI |
| 10.0 | Administration Panorama GlobalProtect XML API CLI |
| 9.1 | Administration Panorama GlobalProtect XML API CLI |
| 9.0 | Administration Panorama GlobalProtect XML API CLI |
| 8.1 | Administration Panorama GlobalProtect XML API CLI |
| 8.0 | Administration Panorama GlobalProtect XML API CLI |
| 7.1 | Administration GlobalProtect |
Version Information
All release families are shown below. Search for a version or choose a family to jump to its entry. Listing a release here is not an upgrade recommendation. Use Support Preferred Releases when planning an upgrade.
A dash means no matching link is available in this reference. It does not mean there are no issues or vulnerabilities. Historical 7.0.0, 7.1.0, and 8.0.0 release information is no longer published by the vendor.