>
    Strata Copilot
    dump ipsecprofiles
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Use CLI Commands
    4. Dump Commands
    5. dump ipsecprofiles
    Download PDF
    Prisma SD-WAN

    dump ipsecprofiles

    Table of Contents

    dump ipsecprofiles

    Use the dump ipsecprofiles command to display IPsec profile configuration details. Information includes authentication type, IKE and ESP parameters, Dead Peer Detection (DPD) settings, and Post-Quantum Cryptography (PQC) configuration when enabled.
    For quantum-resistant VPNs (version 6.8.1 and later), the output displays Additional Key Exchange algorithms for hybrid classical and post-quantum key exchanges, and Post-Quantum Pre-shared Key (PPK) settings including negotiation mode and key identifier.

    Command

    dump ipsecprofiles (all | profile=<profile-name>)

    Options

    allDisplay configuration for all IPsec profiles.
    profileEnter the IPsec profile name to view configuration for a specific profile.

    Command Notes

    RoleSuper, Read Only, Monitor
    Related Commands
    dump servicelink status
    dump interface status
    Introduced in Release 4.7.1

    Example

    Standard IPsec profile output
    dump ipsecprofiles profile=Standard_Profile
IPSec Profile                    : Standard_Profile
 Authentication Type             : psk
 Local ID Type                   : local_ip
 Key Exchange                    : ikev2
 IKE Reauth                      : no
 IKE Lifetime                    : 24 hours
 IKE Remote Port                 : 500
 IKE DH Group/Encryption/Hash    : ecp384/aes256/sha256, ecp256/aes256/sha512
 ESP Lifetime                    : 8 hours
 ESP Encapsulation               : Auto
 ESP DH Group/Encryption/Hash    : ecp384/aes256/sha256, ecp256/aes256/sha512
 DPD Enabled                     : yes
 DPD Delay                       : 10
 DPD Timeout                     : 30
    IPsec profile with Post-Quantum Cryptography (version 6.8.1 and later)
    dump ipsecprofiles profile=PQC_Profile
IPSec Profile                    : PQC_Profile
 Authentication Type             : psk
 Local ID Type                   : local_ip
 Key Exchange                    : ikev2
 IKE Reauth                      : no
 IKE Lifetime                    : 24 hours
 IKE Remote Port                 : 500
 IKE DH Group/Encryption/Hash    : ecp384/aes256/sha256
 IKE PQC KEM Enabled             : true
 IKE Additional Key Exchanges    : ADDKE1=mlkem768 ADDKE2=mlkem1024 ADDKE3=ecp256
 ESP Lifetime                    : 8 hours
 ESP Encapsulation               : Auto
 ESP DH Group/Encryption/Hash    : ecp384/aes256/sha256
 ESP PQC KEM Enabled             : true
 ESP Additional Key Exchanges    : ADDKE1=mlkem768 ADDKE2=mlkem1024
 DPD Enabled                     : yes
 DPD Delay                       : 10
 DPD Timeout                     : 30
 PPK                             : preferred (key-id: datacenter-quantum-key)

    © 2026 Palo Alto Networks, Inc. All rights reserved.