>
    Strata Copilot
    dump network-policy config policy-rules
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Use CLI Commands
    4. Dump Commands
    5. dump network-policy config policy-rules
    Download PDF
    Prisma SD-WAN

    dump network-policy config policy-rules

    Table of Contents

    dump network-policy config policy-rules

    Use the dump network-policy config policy-rules command to display the path policy rule configuration for a device.
    Information displayed includes the application name, policy rule, policy set, order number, network context, prefixes, service groups, and paths.

    Command

    dump network-policy config policy-rules ( all | application=
				application name or ID| app-wildcard | [enabled=true |enabled=false] | network-context=networkcontext ID | path-type= [path-type=direct | path-type=vpn] | path-label= path label or ID| policy-rule=
				policy-rule name | | policy-set=
				policy-set name | prefix=
				name of the prefix | service-context= Group ID)

    Options

    allEnter all to display configuration of all path policy rules on the device.
    applicationEnter an application name or ID to display policy rules for the application.
    app-wildcardChoose this option to display policy rules which are not configured for any application.
    enabledChoose true or false to display policy rules which are either enabled or disabled.
    network-contextEnter a network context ID to display policy rules for the network context.
    path-typeEnter a path type to display information for the path. Path type is either direct or VPN.
    path-labelEnter a path label or path ID to display policy rules for the path.
    policy-ruleEnter a policy rule name or ID to display information for the policy rule.
    policy-setEnter a policy set name or ID to display policy rules in the policy set.
    prefixEnter a prefix name or ID to display policy rules for the prefix.
    service-contextEnter a service group ID to display policy rules for the service group.

    Command Notes

    RoleSuper, Read Only, Monitor
    Related Commands
    dump network-policy config policy-sets
    Introduced in Release 5.0.1

    Example

    dump network-policy config policy-rules application=Adobeconnect
				Network Policy Rule : 15311157630600173 : C-1
				Policy Set : 15282771307010195 : Policy Set-1
				Applications:15186805682900053 : adobeconnect
				Source Prefix : 15272331126400047 : EnterpriseGlobalPrefix
				Destination Prefix : 15311156874260255 :
				Network Context ID : none
				Order Number : 1024
				Enabled : true
				Active Paths:
				Path Label : public-*Path Type : direct
				Backup Paths: none
				Service Contexts: none
				Network Policy Rule : 15311158615700214 : C-2
				Policy Set : 15282771307010195 : Policy Set-1
				Applications:15186805682900053 : adobeconnect
				Source Prefix : 15272331126400047 : EnterpriseGlobalPrefix
				Destination Prefix : 15311158461310162 :
				Network Context ID : none
				Order Number : 1024
				Enabled : true
				Active Paths:
				Path Label : public-*Path Type : direct
				Backup Paths: none
				Service Contexts: none
			
    dump network-policy config policy-rules all
Network Policy Rule 	: 1665722128500017628   : enterprise-default
  Policy Set        	: 1665722128442016828   : Default Path Simple Stack Default Rule Policy Set (Simple)
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: 1665722013410012528   : EnterpriseGlobalPrefix
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths:
    Path Label  : private-*
    Path Type   : direct
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1674657402598017628   : Test Specific User
  Policy Set        	: 1666172238228021828   : User ID Test
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: none     
  UserGroups:
   1675699201696006228  : CN=engineering,DC=sdwanamsteltest,DC=onmicrosoft,DC=com
   1675699201696005528  : CN=devops,DC=sdwanamsteltest,DC=onmicrosoft,DC=com
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
    Path Label  : private-*
    Path Type   : direct
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1675854982005007228   : test2
  Policy Set        	: 1666172238228021828   : User ID Test
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none
 
Network Policy Rule 	: 1665722128450017028   : default
  Policy Set        	: 1665722128442016828   : Default Path Simple Stack Default Rule Policy Set (Simple)
  Applications      	: WILDCARD
  Source Prefix     	: none
  Users             	: any
  UserGroups        	: any
  Destination Prefix	: none
  Network Context ID	: none
  Order Number      	: 1024
  Enabled           	: true
  Active Paths:
    Path Label  : public-*
    Path Type   : direct
    Path Label  : public-*
    Path Type   : vpn
    Path Label  : private-*
    Path Type   : direct
    Path Label  : private-*
    Path Type   : vpn
  Backup Paths: none
  L3 Failure Paths: none
  Service Contexts: none

    © 2026 Palo Alto Networks, Inc. All rights reserved.