CLI and XML API changes to Panorama features in PAN-OS 8.1
PAN-OS 8.1 has the following CLI and XML API changes
for Panorama features:
Feature
Change
Deploying content updates
The CLI commands to set and
display thresholds for the Antivirus updates and Applications and
Threats updates that the Panorama management server deploys to firewalls
and Log Collectors have changed in PAN-OS 8.1.
PAN-OS
8.0.6 and later PAN-OS 8.0 releases have the following operational
mode commands (which were unavailable in earlier releases):
>
request batch
{content | anti-virus}
threshold set
<1-120>
>
request batch
{content | anti-virus}
threshold show
PAN-OS 8.1 release:
#
set deviceconfig system deployment-update-schedule
<schedule_name>
<update_type>
recurring threshold
<1-336>
#
show deviceconfig system deployment-update-schedule
<schedule_name>
Request get-template-stack
The following command to view
the template stack-level configuration is deprecated in PAN-OS 8.1:
>
request get-template-stack template-stack
<value>
xpath
<value>
transform
<value>
sortby
<value>
order
<value>
nrec
<value>
skip
<value>
dir
<value>
anchor
<value>
emptyok
<value>
shallow
<value>
xpaths request
get-template-stack
template-stack
<value>
xpath
<value>
transform
<value>
sortby
<value>
order
<value>
nrec
<value>
skip
<value>
dir
<value>
anchor
<value>
emptyok
<value>
shallow
<value>
xpaths entry
In
PAN-OS 8.1, run the following command to view the stack-level configuration:
>
show template-stack
<name>
To
view the merged configuration of a stack and all inherited templates,
run the following command:
>
show template
<name>
Managed devices privileges
The CLI command to set administrative role
privileges for managed devices has changed in PAN-OS 8.1.
PAN-OS
8.0 release:
#
set shared admin-role
<name>
role
panorama webui panorama managed-devices
PAN-OS 8.1 release:
#
set shared admin-role
<name>
role
panorama webui panorama managed-devices
{summary | health}
{enable | read-only | disable}
Context switch privileges
The CLI command to set context switch privileges
for managed devices has changed in PAN-OS 8.1. You can configure
a decryption profile and a decryption forwarding profile.
PAN-OS
8.0 release:
#
set shared admin-role
<name>
role
panorama contextswitch objects
decryption-profile