>
    Strata Copilot
    CLI Cheat Sheet: Content-ID
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. CLI Cheat Sheet: Content-ID
    Download PDF
    Next-Generation Firewall

    CLI Cheat Sheet: Content-ID

    Table of Contents

    CLI Cheat Sheet: Content-ID

    Essential CLI commands for Content-ID security services including antivirus, anti-spyware, vulnerability protection, and URL filtering.
    Where Can I Use This?What Do I Need?
    NGFW (Managed by PAN-OS or Panorama)
    • No prerequisites needed
    Use the following commands to perform configuration tasks associated with Content-ID™.
    If you want to . . .
    Use . . .
    Brotli-encoded HTTP Decompression Commands (Available in PAN-OS 11.2.4 and later, operating content release 8902-9003 and later; with additional platform and UI support in PAN-OS 12.1)
    Brotli decompression is disabled by default.
    • Verify that Brotli decompression is available on your firewall.
    		 
    show system setting brotli
    For example:
    show system setting brotli 

Supported: yes
Enabled: no
    Supported indicates if the firewall supports Brotli decompression and Enabled indicates the current operational status. Brotli decompression is disabled by default.
    The following platforms support Brotli decompression:
    PAN-OS 11.2.4 and later PAN-OS 11.2 releases
    • PA-5400, PA-5500, and PA-7500 Series
    • VM-Series (VM-100, VM-300, VM-500, and VM-700)
    PAN-OS 12.1 and later (in addition to the above platforms)
    • PA-220, PA-400, PA-800/850, PA-1400, PA-3200, PA-3400, and PA-5200 Series
    • Enable Brotli decompression on the firewall (disabled by default).
    		 
    set system setting brotli-encoding enable
    You can verify the configuration by using the command: show system setting brotli-encoding
    For example:
    set system setting brotli-encoding enable
    To verify that Brotli has been enabled:
    show system setting brotli-encoding

Enabled: True
    • Disable Brotli decompression on the firewall.
    		 
    set system setting brotli-encoding disable
    For example:
    set system setting brotli-encoding disable
    To verify that Brotli has been disabled:
    show system setting brotli-encoding

Enabled: False
    • Review Brotli processing statistics.
    		 
    show system setting brotli
    For example:
    show system setting brotli

Supported: yes
Enabled: yes
 
                      Number of ctxs: #####
 
           Number of ctxs allocation: 0
   Number of ctxs allocation failure: 0
           Number of ctx double free: 0
             Number of ctx free race: 0
            Number of ctx free reuse: 0
                 Number of ctx reuse: 0

    © 2025 Palo Alto Networks, Inc. All rights reserved.