Set Commands Changed in PAN-OS 12.2
Focus
Focus
Next-Generation Firewall

Set Commands Changed in PAN-OS 12.2

Table of Contents

Set Commands Changed in PAN-OS 12.2

Command line interface 'set' commands that are changed in PAN-OS 12.2:
The following commands are modified in the 12.2 release.
Was: set device-group <name> profiles wildfire-analysis <name> mica-engine-wildfire-rules <name> direction <download|both|upload>
Now: set device-group <name> profiles wildfire-analysis <name> mica-engine-wildfire-rules <name> direction <download|upload|both>
Was: set device-group <name> reports <name> type panorama-threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Now: set device-group <name> reports <name> type panorama-threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|previous_app|aipd_profile|aipd_rule|aipd_ip_attrs|aipd_match_field|aipd_dns_seen|aipd_asn|aipd_src_of_edl|aipd_sess_state|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Was: set device-group <name> reports <name> type panorama-traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|ai_traffic|ai_fwd_error|k8s_cluster_id|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Now: set device-group <name> reports <name> type panorama-traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|ai_traffic|ai_fwd_error|k8s_cluster_id|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|previous_app|xpf|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Was: set device-group <name> reports <name> type panorama-trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Now: set device-group <name> reports <name> type panorama-trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|previous_app|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Was: set device-group <name> reports <name> type panorama-url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|serial|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers>
Now: set device-group <name> reports <name> type panorama-url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|serial|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers|req_headers|resp_headers|status_code|stream_offset>
Was: set shared profiles wildfire-analysis <name> mica-engine-wildfire-rules <name> direction <download|both|upload>
Now: set shared profiles wildfire-analysis <name> mica-engine-wildfire-rules <name> direction <download|upload|both>
Was: set shared reports <name> type panorama-threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Now: set shared reports <name> type panorama-threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|previous_app|aipd_profile|aipd_rule|aipd_ip_attrs|aipd_match_field|aipd_dns_seen|aipd_asn|aipd_src_of_edl|aipd_sess_state|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Was: set shared reports <name> type panorama-traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|ai_traffic|ai_fwd_error|k8s_cluster_id|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Now: set shared reports <name> type panorama-traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|ai_traffic|ai_fwd_error|k8s_cluster_id|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|previous_app|xpf|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Was: set shared reports <name> type panorama-trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Now: set shared reports <name> type panorama-trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|previous_app|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Was: set shared reports <name> type panorama-url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|serial|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers>
Now: set shared reports <name> type panorama-url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|serial|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers|req_headers|resp_headers|status_code|stream_offset>
Was: set shared reports <name> type threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Now: set shared reports <name> type threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|cluster_name|flow_type|http2_connection_64|local_deep_learning|saas_sid|saas_sidx|saas_type|saas_user|saas_tenant|k8s_cluster_id|previous_app|aipd_profile|aipd_rule|aipd_ip_attrs|aipd_match_field|aipd_dns_seen|aipd_asn|aipd_src_of_edl|aipd_sess_state|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|imsi|monitortag|imei|users|category-of-threatid|threat-type>
Was: set shared reports <name> type traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Now: set shared reports <name> type traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|src_uuid|dst_uuid|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|parent_session_id_64|category|session_end_reason|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|flow_type|cluster_name|http2_connection_64|tcp_rtt_c2s|tcp_rtt_s2c|total_n_ooseq_c2s|total_n_ooseq_s2c|tcp_retransit_cnt_c2s|tcp_retransit_cnt_s2c|tcp_zero_window_cnt_c2s|tcp_zero_window_cnt_s2c|previous_app|xpf|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|imsi|monitortag|imei>
Was: set shared reports <name> type trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Now: set shared reports <name> type trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|parent_session_id_64|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|cluster_name|flow_type|http2_connection_64|previous_app|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_adv_dev_id|dst_adv_dev_id|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|imsi|monitortag|imei|standard-ports-of-app>
Was: set shared reports <name> type url group-by <additional_headers|action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers>
Now: set shared reports <name> type url group-by <additional_headers|action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|device_name|vsys_name|url|tunnelid|monitortag|imsi|imei|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid|additional_headers|req_headers|resp_headers|status_code|stream_offset>
Was: set template <name> config deviceconfig high-availability group mode active-passive hsci hsci-a vlan <1-4094>
Now: set template <name> config deviceconfig high-availability group mode active-passive hsci hsci-a vlan <2-4094>
Was: set template <name> config deviceconfig high-availability group mode active-passive hsci hsci-b vlan <1-4094>
Now: set template <name> config deviceconfig high-availability group mode active-passive hsci hsci-b vlan <2-4094>
Was: set template <name> config deviceconfig high-availability interface ha1 port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|hsci-b|management>
Now: set template <name> config deviceconfig high-availability interface ha1 port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|management>
Was: set template <name> config deviceconfig high-availability interface ha1-backup port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|hsci-b|management>
Now: set template <name> config deviceconfig high-availability interface ha1-backup port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-b|management>
Was: set template <name> config deviceconfig high-availability interface ha2 port <value>|<dedicated-ha2|hsci|hsci-a|hsci-b>
Now: set template <name> config deviceconfig high-availability interface ha2 port <value>|<dedicated-ha2|hsci|hsci-a>
Was: set template <name> config deviceconfig high-availability interface ha2-backup port <value>|<dedicated-ha2|hsci|hsci-a|hsci-b>
Now: set template <name> config deviceconfig high-availability interface ha2-backup port <value>|<dedicated-ha2|hsci|hsci-b>
Was: set template <name> config deviceconfig smart-connect-ai vims poe-power-off-delay <0-60>
Now: set template <name> config deviceconfig smart-connect-ai vims poe-power-off-delay <1-60>
Was: set template <name> config deviceconfig smart-connect-ai vims system-power-off-delay <0-60>
Now: set template <name> config deviceconfig smart-connect-ai vims system-power-off-delay <1-600>
Was: set template <name> config network interface fail-open <yes|no>
Now: set template <name> config network interface fail-open <name>
Was: set template <name> config network interface sdwan units <name> protocol <ipv4|ipv6|none|internal>
Now: set template <name> config network interface sdwan units <name> protocol <ipv4|ipv6|none|internal|branch-sase-vif>
Was: set template <name> config network secure-web-gateway explicit-web-gateway authentication-method <none|saml-cas|kerberos-sso>
Now: set template <name> config network secure-web-gateway explicit-web-gateway authentication-method <none|saml-cas|kerberos-sso|local-database|ldap|radius|tacplus|kerberos|authentication-sequence|token>
Was: set template <name> config network tunnel ipsec <name> manual-key esp encryption algorithm <des|3des|aes-128-cbc|aes-192-cbc|aes-256-cbc|aes-128-gcm|aes-256-gcm|null>
Now: set template <name> config network tunnel ipsec <name> manual-key esp encryption algorithm <des|3des|aes-128-cbc|aes-192-cbc|aes-256-cbc|aes-128-gcm|aes-256-gcm|chacha20-poly1305|null>
Was: set template <name> config vsys <name> import resource max-security-rules <0-5000>
Now: set template <name> config vsys <name> import resource max-security-rules <0-65000>
Was: set template-stack <name> config devices <name> deviceconfig high-availability group mode active-passive hsci hsci-a vlan <1-4094>
Now: set template-stack <name> config devices <name> deviceconfig high-availability group mode active-passive hsci hsci-a vlan <2-4094>
Was: set template-stack <name> config devices <name> deviceconfig high-availability group mode active-passive hsci hsci-b vlan <1-4094>
Now: set template-stack <name> config devices <name> deviceconfig high-availability group mode active-passive hsci hsci-b vlan <2-4094>
Was: set template-stack <name> config devices <name> deviceconfig high-availability interface ha1 port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|hsci-b|management>
Now: set template-stack <name> config devices <name> deviceconfig high-availability interface ha1 port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|management>
Was: set template-stack <name> config devices <name> deviceconfig high-availability interface ha1-backup port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-a|hsci-b|management>
Now: set template-stack <name> config devices <name> deviceconfig high-availability interface ha1-backup port <value>|<dedicated-ha1|ha1-a|ha1-b|aux-1|aux-2|hsci-b|management>
Was: set template-stack <name> config devices <name> deviceconfig high-availability interface ha2 port <value>|<dedicated-ha2|hsci|hsci-a|hsci-b>
Now: set template-stack <name> config devices <name> deviceconfig high-availability interface ha2 port <value>|<dedicated-ha2|hsci|hsci-a>
Was: set template-stack <name> config devices <name> deviceconfig high-availability interface ha2-backup port <value>|<dedicated-ha2|hsci|hsci-a|hsci-b>
Now: set template-stack <name> config devices <name> deviceconfig high-availability interface ha2-backup port <value>|<dedicated-ha2|hsci|hsci-b>
Was: set template-stack <name> config devices <name> deviceconfig smart-connect-ai vims poe-power-off-delay <0-60>
Now: set template-stack <name> config devices <name> deviceconfig smart-connect-ai vims poe-power-off-delay <1-60>
Was: set template-stack <name> config devices <name> deviceconfig smart-connect-ai vims system-power-off-delay <0-60>
Now: set template-stack <name> config devices <name> deviceconfig smart-connect-ai vims system-power-off-delay <1-600>
Was: set template-stack <name> config devices <name> network interface fail-open <yes|no>
Now: set template-stack <name> config devices <name> network interface fail-open <name>
Was: set template-stack <name> config devices <name> network interface sdwan units <name> protocol <ipv4|ipv6|none|internal>
Now: set template-stack <name> config devices <name> network interface sdwan units <name> protocol <ipv4|ipv6|none|internal|branch-sase-vif>
Was: set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway authentication-method <none|saml-cas|kerberos-sso>
Now: set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway authentication-method <none|saml-cas|kerberos-sso|local-database|ldap|radius|tacplus|kerberos|authentication-sequence|token>
Was: set template-stack <name> config devices <name> network tunnel ipsec <name> manual-key esp encryption algorithm <des|3des|aes-128-cbc|aes-192-cbc|aes-256-cbc|aes-128-gcm|aes-256-gcm|null>
Now: set template-stack <name> config devices <name> network tunnel ipsec <name> manual-key esp encryption algorithm <des|3des|aes-128-cbc|aes-192-cbc|aes-256-cbc|aes-128-gcm|aes-256-gcm|chacha20-poly1305|null>
Was: set template-stack <name> config devices <name> vsys <name> import resource max-security-rules <0-5000>
Now: set template-stack <name> config devices <name> vsys <name> import resource max-security-rules <0-65000>