>
    Strata Copilot
    CLI Cheat Sheet: Device Management
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. CLI Cheat Sheet: Device Management
    Download PDF
    Next-Generation Firewall

    CLI Cheat Sheet: Device Management

    Table of Contents

    CLI Cheat Sheet: Device Management

    Essential CLI commands for PAN-OS device administration including system status, licensing, updates, and basic device operations.
    Where Can I Use This?What Do I Need?
    NGFW (Managed by PAN-OS or Panorama)
    • No prerequisites needed
    Use the following table to quickly locate commands for common device management tasks:
    If you want to...
    Use...
    General Commands
    • Show general system health information.
    > show system info
    • Show percent usage of disk partitions. Include the optional files parameter to show information about inodes, which track file storage.
    > show system disk-space files
    • Show the maximum log file size.
    > show system logdb-quota
    • Show running processes.
    > show system software status
    • Show processes running in the management plane.
    > show system resources
    • Show resource utilization in the dataplane.
    > show running resource-monitor
    • Show the licenses installed on the device.
    > request license info
    • Show when commits, downloads, and/or upgrades are completed.
    > show jobs processed
    • Show session information.
    > show session info
    • Show information about a specific session.
    > show session id <session-id>
    • Show the running security policy.
    > show running security-policy
    • Show the authentication logs.
    > less mp-log authd.log
    • Restart the device.
    > request restart system
    • Show the administrators who are currently logged in to the web interface, CLI, or API.
    > show admins
    • Show the administrators who can access the web interface, CLI, or API, regardless of whether those administrators are currently logged in.
      When you run this command on the firewall, the output includes local administrators, remote administrators, and all administrators pushed from a Panorama template. Remote administrators are listed regardless of when they last logged in.
    > show admins all
    • Configure the management interface as a DHCP client.
      For a successful commit, you must include each of the parameters: accept-dhcp-domain, accept-dhcp-hostname, send-client-id, and send-hostname.
    # set deviceconfig system type dhcp-client accept-dhcp-domain <yes|no> accept-dhcp-hostname <yes|no> send-client-id <yes|no> send-hostname <yes|no>

    © 2026 Palo Alto Networks, Inc. All rights reserved.