set device-group <name> device-context-segment
set device-group <name> device-context-segment <name>
set device-group <name> device-context-segment <name> description <value>
set device-group <name> device-context-segment <name> uuid <value>
set device-group <name> metadata-profile
set device-group <name> metadata-profile <name>
set device-group <name> metadata-profile <name> base-profile <value>
set device-group <name> metadata-profile <name> description <value>
set device-group <name> metadata-profile <name> disable-override <yes|no>
set device-group <name> metadata-profile <name> fid-exclude-list  [ <fid-exclude-list1> <fid-exclude-list2>... ]
set device-group <name> metadata-profile <name> fid-include-list  [ <fid-include-list1> <fid-include-list2>... ]
set device-group <name> mobile-network
set device-group <name> mobile-network equipment
set device-group <name> mobile-network equipment <name>
set device-group <name> mobile-network equipment <name> description <value>
set device-group <name> mobile-network equipment <name> imei <value>
set device-group <name> mobile-network equipment <name> imei-prefix <value>
set device-group <name> mobile-network equipment <name> imei-range <value>
set device-group <name> mobile-network equipment-group
set device-group <name> mobile-network equipment-group <name>
set device-group <name> mobile-network equipment-group <name> description <value>
set device-group <name> mobile-network equipment-group <name> equipments  [ <equipments1> <equipments2>... ]
set device-group <name> mobile-network subscriber
set device-group <name> mobile-network subscriber <name>
set device-group <name> mobile-network subscriber <name> description <value>
set device-group <name> mobile-network subscriber <name> imsi <value>
set device-group <name> mobile-network subscriber <name> imsi-prefix <value>
set device-group <name> mobile-network subscriber <name> imsi-range <value>
set device-group <name> mobile-network subscriber-group
set device-group <name> mobile-network subscriber-group <name>
set device-group <name> mobile-network subscriber-group <name> description <value>
set device-group <name> mobile-network subscriber-group <name> subscribers  [ <subscribers1> <subscribers2>... ]
set device-group <name> post-rulebase decryption rules <name> rule-quic-decrypt <yes|no>
set device-group <name> post-rulebase decryption rules <name> type quic-forward-proxy
set device-group <name> post-rulebase decryption rules <name> type quic-inbound-inspection
set device-group <name> post-rulebase decryption rules <name> type quic-inbound-inspection certificates  [ <certificates1> <certificates2>... ]
set device-group <name> pre-rulebase decryption rules <name> rule-quic-decrypt <yes|no>
set device-group <name> pre-rulebase decryption rules <name> type quic-forward-proxy
set device-group <name> pre-rulebase decryption rules <name> type quic-inbound-inspection
set device-group <name> pre-rulebase decryption rules <name> type quic-inbound-inspection certificates  [ <certificates1> <certificates2>... ]
set device-group <name> profiles ip-defense
set device-group <name> profiles ip-defense <name>
set device-group <name> profiles ip-defense <name> description <value>
set device-group <name> profiles ip-defense <name> direction <source|destination>
set device-group <name> profiles ip-defense <name> edl
set device-group <name> profiles ip-defense <name> edl <name>
set device-group <name> profiles ip-defense <name> edl <name> scope
set device-group <name> profiles ip-defense <name> edl <name> scope all-packets
set device-group <name> profiles ip-defense <name> edl <name> scope no-dns
set device-group <name> profiles ip-defense <name> edl <name> scope no-dns edl-type
set device-group <name> profiles ip-defense <name> edl <name> scope no-dns edl-type ip-address
set device-group <name> profiles ip-defense <name> edl <name> scope no-dns edl-type ip-and-port
set device-group <name> profiles ip-defense <name> rule
set device-group <name> profiles ip-defense <name> rule <name>
set device-group <name> profiles ip-defense <name> rule <name> action <allow|alert|block|deny>
set device-group <name> profiles ip-defense <name> rule <name> log-severity <informational|low|medium|high|critical>
set device-group <name> profiles ip-defense <name> rule <name> match
set device-group <name> profiles ip-defense <name> rule <name> match and-condition
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> not-tag
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> not-tag <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> tag
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> tag <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable <name> match <value>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> tag
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> tag <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable <name>
set device-group <name> profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable <name> match <value>
set device-group <name> profiles ip-defense <name> rule <name> match any
set device-group <name> profiles ip-defense <name> rule <name> match unkown
set device-group <name> profiles sdwan-path-quality <name> metric bandwidth
set device-group <name> profiles sdwan-path-quality <name> metric bandwidth sensitivity <low|medium|high>
set device-group <name> profiles sdwan-path-quality <name> metric bandwidth threshold <1-100>
set device-group <name> profiles sdwan-saas-quality <name> monitor-mode http-https url-timeout <1-60>
set device-group <name> profiles spyware <name> botnet-domains blocklist
set device-group <name> profiles spyware <name> botnet-domains blocklist <name>
set device-group <name> profiles spyware <name> botnet-domains blocklist <name> description <value>
set device-group <name> profiles spyware <name> botnet-domains lists <name> action bypass
set device-group <name> profiles spyware <name> botnet-domains rtype-action custom-rtype-block-list <value>
set device-group <name> profiles url-filtering <name> http-header-logging
set device-group <name> profiles url-filtering <name> http-header-logging log-all-headers <yes|no>
set device-group <name> profiles url-filtering <name> http-header-logging log-status-code <yes|no>
set device-group <name> profiles url-filtering <name> http-header-logging log-stream-offset <yes|no>
set device-group <name> profiles url-filtering <name> http-header-logging max-header-len <1-4092>
set device-group <name> profiles url-filtering <name> http-header-logging truncate-headers <yes|no>
set device-group <name> profiles url-filtering <name> http-header-logging type
set device-group <name> profiles url-filtering <name> http-header-logging type request-headers
set device-group <name> profiles url-filtering <name> http-header-logging type request-headers <name>
set device-group <name> profiles url-filtering <name> http-header-logging type request-headers <name> max-header-len <1-4092>
set device-group <name> profiles url-filtering <name> http-header-logging type request-headers <name> truncate-headers <yes|no>
set device-group <name> profiles url-filtering <name> http-header-logging type response-headers
set device-group <name> profiles url-filtering <name> http-header-logging type response-headers <name>
set device-group <name> profiles url-filtering <name> http-header-logging type response-headers <name> max-header-len <1-4092>
set device-group <name> profiles url-filtering <name> http-header-logging type response-headers <name> truncate-headers <yes|no>
set device-group <name> profiles vulnerability <name> mica-engine-vulnerability-enabled <name> local-deep-learning <enable|disable>
set device-group <name> threats vulnerability <name> default-action exclude-inline-cloud-analysis-and-ldl
set deviceconfig plugins
set deviceconfig plugins dlp
set deviceconfig plugins dlp config
set deviceconfig plugins dlp config scan-report
set deviceconfig plugins dlp config scan-report snippet
set deviceconfig plugins dlp config scan-report snippet enable <yes|no>
set deviceconfig plugins dlp config scan-report snippet mask-level <no-mask|partial-mask|full-mask>
set deviceconfig setting cloud-gp-svc
set deviceconfig setting cloud-gp-svc address <ip/netmask>|<value>
set deviceconfig setting cloud-gp-svc disable-host-compliance-service <yes|no>
set deviceconfig setting cloud-gp-svc disabled <yes|no>
set deviceconfig setting cloud-gp-svc discovery-address <ip/netmask>|<value>
set deviceconfig setting cloud-gp-svc host-compliance-service-address <ip/netmask>|<value>
set deviceconfig setting cloud-userid discovery-service
set deviceconfig setting cloud-userid discovery-service address <ip/netmask>|<value>
set deviceconfig setting cloud-userid discovery-service refresh-interval <1-240>
set deviceconfig setting cloud-userid identity-cloud-mode <icd|icmd>
set deviceconfig setting iot enable-device-context-segments <yes|no>
set deviceconfig setting iot metadata-collection
set deviceconfig setting iot metadata-collection address <value>
set deviceconfig setting mobility-overlapping-ip-private-apns <yes|no>
set deviceconfig system default-mkey-grace-period <60-120>
set log-collector <name> accounting-setting
set log-collector <name> accounting-setting accounting-server-profile <value>
set log-collector <name> accounting-setting admin-lockout
set log-collector <name> accounting-setting admin-lockout failed-attempts <0-10>
set log-collector <name> accounting-setting admin-lockout lockout-time <0-60>
set log-collector <name> accounting-setting admin-session
set log-collector <name> accounting-setting admin-session max-session-count <0-4>
set log-collector <name> accounting-setting admin-session max-session-time <value>
set log-collector <name> accounting-setting api
set log-collector <name> accounting-setting api key
set log-collector <name> accounting-setting api key certificate <value>
set log-collector <name> accounting-setting api key lifetime <1-525600>|<0>
set log-collector <name> accounting-setting idle-timeout <1-1440>|<0>
set log-collector <name> accounting-setting imported-panorama-admin-users  [ <imported-panorama-admin-users1> <imported-panorama-admin-users2>... ]
set log-collector <name> accounting-setting users
set log-collector <name> accounting-setting users <name>
set log-collector <name> accounting-setting users <name> authentication-profile <value>
set log-collector <name> accounting-setting users <name> password-profile <value>
set log-collector <name> accounting-setting users <name> permissions
set log-collector <name> accounting-setting users <name> permissions role-based
set log-collector <name> accounting-setting users <name> permissions role-based superuser <yes>
set log-collector <name> accounting-setting users <name> phash <value>
set log-collector <name> accounting-setting users <name> public-key <value>
set panorama cloud-redistribution disable-ip-user-query <yes|no>
set panorama cloud-redistribution receiving <name> polling-interval <1-3600>
set shared admin-role <name> role device-group restapi device access-domain <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device admin-role-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device administrators <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device authentication-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device authentication-sequence <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device dns-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device kerberos-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device radius-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device saml-idp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device scp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi device tacplus-server-profiles <enable|read-only|disable>
set shared admin-role <name> role device-group restapi objects mobile-network-equipment <enable|read-only|disable>
set shared admin-role <name> role device-group restapi objects mobile-network-equipment-group <enable|read-only|disable>
set shared admin-role <name> role device-group restapi objects mobile-network-subscriber <enable|read-only|disable>
set shared admin-role <name> role device-group restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set shared admin-role <name> role device-group webui device iot-security device-context-segment-association <enable|read-only|disable>
set shared admin-role <name> role device-group webui device setup smart-connect-ai <enable|read-only|disable>
set shared admin-role <name> role device-group webui network network-profiles stp-profile <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects device-context-segment <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects mobile-network
set shared admin-role <name> role device-group webui objects mobile-network equipment <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects mobile-network equipment-group <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects mobile-network subscriber <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects mobile-network subscriber-group <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects panos-shield
set shared admin-role <name> role device-group webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set shared admin-role <name> role device-group webui objects security-profiles ip-defense <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device access-domain <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device admin-role-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device administrators <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device authentication-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device authentication-sequence <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device dns-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device kerberos-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device radius-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device saml-idp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device scp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi device tacplus-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi objects mobile-network-equipment <enable|read-only|disable>
set shared admin-role <name> role panorama restapi objects mobile-network-equipment-group <enable|read-only|disable>
set shared admin-role <name> role panorama restapi objects mobile-network-subscriber <enable|read-only|disable>
set shared admin-role <name> role panorama restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama access-domain <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama admin-role-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama administrators <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama authentication-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama authentication-sequence <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama kerberos-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama radius-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama saml-idp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama scp-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama restapi panorama tacplus-server-profiles <enable|read-only|disable>
set shared admin-role <name> role panorama webui device iot-security device-context-segment-association <enable|read-only|disable>
set shared admin-role <name> role panorama webui device setup smart-connect-ai <enable|read-only|disable>
set shared admin-role <name> role panorama webui network network-profiles stp-profile <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects device-context-segment <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects mobile-network
set shared admin-role <name> role panorama webui objects mobile-network equipment <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects mobile-network equipment-group <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects mobile-network subscriber <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects mobile-network subscriber-group <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects panos-shield
set shared admin-role <name> role panorama webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set shared admin-role <name> role panorama webui objects security-profiles ip-defense <enable|read-only|disable>
set shared admin-role <name> role panorama webui panorama cloud-redistribution <enable|read-only|disable>
set shared device-context-segment
set shared device-context-segment <name>
set shared device-context-segment <name> description <value>
set shared device-context-segment <name> uuid <value>
set shared metadata-profile
set shared metadata-profile <name>
set shared metadata-profile <name> base-profile <value>
set shared metadata-profile <name> description <value>
set shared metadata-profile <name> disable-override <no>
set shared metadata-profile <name> fid-exclude-list  [ <fid-exclude-list1> <fid-exclude-list2>... ]
set shared metadata-profile <name> fid-include-list  [ <fid-include-list1> <fid-include-list2>... ]
set shared mobile-network
set shared mobile-network equipment
set shared mobile-network equipment <name>
set shared mobile-network equipment <name> description <value>
set shared mobile-network equipment <name> imei <value>
set shared mobile-network equipment <name> imei-prefix <value>
set shared mobile-network equipment <name> imei-range <value>
set shared mobile-network equipment-group
set shared mobile-network equipment-group <name>
set shared mobile-network equipment-group <name> description <value>
set shared mobile-network equipment-group <name> equipments  [ <equipments1> <equipments2>... ]
set shared mobile-network subscriber
set shared mobile-network subscriber <name>
set shared mobile-network subscriber <name> description <value>
set shared mobile-network subscriber <name> imsi <value>
set shared mobile-network subscriber <name> imsi-prefix <value>
set shared mobile-network subscriber <name> imsi-range <value>
set shared mobile-network subscriber-group
set shared mobile-network subscriber-group <name>
set shared mobile-network subscriber-group <name> description <value>
set shared mobile-network subscriber-group <name> subscribers  [ <subscribers1> <subscribers2>... ]
set shared panos-shield-override
set shared panos-shield-override profiles
set shared panos-shield-override profiles vulnerability
set shared panos-shield-override profiles vulnerability <name>
set shared panos-shield-override profiles vulnerability <name> threat-exception
set shared panos-shield-override profiles vulnerability <name> threat-exception <name>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action alert
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action allow
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action block-ip
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action block-ip duration <1-3600>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action block-ip track-by <source|source-and-destination>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action default
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action drop
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action reset-both
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action reset-client
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> action reset-server
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> exempt-ip
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> exempt-ip <name>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> packet-capture <disable|single-packet|extended-capture>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> time-attribute
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> time-attribute interval <1-3600>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> time-attribute threshold <1-65535>
set shared panos-shield-override profiles vulnerability <name> threat-exception <name> time-attribute track-by <source|destination|source-and-destination>
set shared post-rulebase decryption rules <name> rule-quic-decrypt <yes|no>
set shared post-rulebase decryption rules <name> type quic-forward-proxy
set shared post-rulebase decryption rules <name> type quic-inbound-inspection
set shared post-rulebase decryption rules <name> type quic-inbound-inspection certificates  [ <certificates1> <certificates2>... ]
set shared pre-rulebase decryption rules <name> rule-quic-decrypt <yes|no>
set shared pre-rulebase decryption rules <name> type quic-forward-proxy
set shared pre-rulebase decryption rules <name> type quic-inbound-inspection
set shared pre-rulebase decryption rules <name> type quic-inbound-inspection certificates  [ <certificates1> <certificates2>... ]
set shared profiles ip-defense
set shared profiles ip-defense <name>
set shared profiles ip-defense <name> description <value>
set shared profiles ip-defense <name> direction <source|destination>
set shared profiles ip-defense <name> edl
set shared profiles ip-defense <name> edl <name>
set shared profiles ip-defense <name> edl <name> scope
set shared profiles ip-defense <name> edl <name> scope all-packets
set shared profiles ip-defense <name> edl <name> scope no-dns
set shared profiles ip-defense <name> edl <name> scope no-dns edl-type
set shared profiles ip-defense <name> edl <name> scope no-dns edl-type ip-address
set shared profiles ip-defense <name> edl <name> scope no-dns edl-type ip-and-port
set shared profiles ip-defense <name> rule
set shared profiles ip-defense <name> rule <name>
set shared profiles ip-defense <name> rule <name> action <allow|alert|block|deny>
set shared profiles ip-defense <name> rule <name> log-severity <informational|low|medium|high|critical>
set shared profiles ip-defense <name> rule <name> match
set shared profiles ip-defense <name> rule <name> match and-condition
set shared profiles ip-defense <name> rule <name> match and-condition <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> category
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> not-tag
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> not-tag <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> tag
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> tag <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> category <name> variable <name> match <value>
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> tag
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> tag <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable <name>
set shared profiles ip-defense <name> rule <name> match and-condition <name> not-category <name> variable <name> match <value>
set shared profiles ip-defense <name> rule <name> match any
set shared profiles ip-defense <name> rule <name> match unkown
set shared profiles sdwan-path-quality <name> metric bandwidth
set shared profiles sdwan-path-quality <name> metric bandwidth sensitivity <low|medium|high>
set shared profiles sdwan-path-quality <name> metric bandwidth threshold <1-100>
set shared profiles sdwan-saas-quality <name> monitor-mode http-https url-timeout <1-60>
set shared profiles spyware <name> botnet-domains blocklist
set shared profiles spyware <name> botnet-domains blocklist <name>
set shared profiles spyware <name> botnet-domains blocklist <name> description <value>
set shared profiles spyware <name> botnet-domains lists <name> action bypass
set shared profiles spyware <name> botnet-domains rtype-action custom-rtype-block-list <value>
set shared profiles url-filtering <name> http-header-logging
set shared profiles url-filtering <name> http-header-logging log-all-headers <yes|no>
set shared profiles url-filtering <name> http-header-logging log-status-code <yes|no>
set shared profiles url-filtering <name> http-header-logging log-stream-offset <yes|no>
set shared profiles url-filtering <name> http-header-logging max-header-len <1-4092>
set shared profiles url-filtering <name> http-header-logging truncate-headers <yes|no>
set shared profiles url-filtering <name> http-header-logging type
set shared profiles url-filtering <name> http-header-logging type request-headers
set shared profiles url-filtering <name> http-header-logging type request-headers <name>
set shared profiles url-filtering <name> http-header-logging type request-headers <name> max-header-len <1-4092>
set shared profiles url-filtering <name> http-header-logging type request-headers <name> truncate-headers <yes|no>
set shared profiles url-filtering <name> http-header-logging type response-headers
set shared profiles url-filtering <name> http-header-logging type response-headers <name>
set shared profiles url-filtering <name> http-header-logging type response-headers <name> max-header-len <1-4092>
set shared profiles url-filtering <name> http-header-logging type response-headers <name> truncate-headers <yes|no>
set shared profiles vulnerability <name> mica-engine-vulnerability-enabled <name> local-deep-learning <enable|disable>
set shared threats vulnerability <name> default-action exclude-inline-cloud-analysis-and-ldl
set template <name> config deviceconfig setting adns-setting disable-adns <yes|no>
set template <name> config deviceconfig setting adns-setting disable-doh <yes|no>
set template <name> config deviceconfig setting adns-setting max-latency-doh <1-15000>
set template <name> config deviceconfig setting cloud-gp-svc
set template <name> config deviceconfig setting cloud-gp-svc address <ip/netmask>|<value>
set template <name> config deviceconfig setting cloud-gp-svc disable-host-compliance-service <yes|no>
set template <name> config deviceconfig setting cloud-gp-svc disabled <yes|no>
set template <name> config deviceconfig setting cloud-gp-svc discovery-address <ip/netmask>|<value>
set template <name> config deviceconfig setting cloud-gp-svc host-compliance-service-address <ip/netmask>|<value>
set template <name> config deviceconfig setting cloud-userid discovery-service
set template <name> config deviceconfig setting cloud-userid discovery-service address <ip/netmask>|<value>
set template <name> config deviceconfig setting cloud-userid discovery-service refresh-interval <1-240>
set template <name> config deviceconfig setting cloud-userid identity-cloud-mode <icd|icmd>
set template <name> config deviceconfig setting conn-pool-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings cert-verification-enable <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-bool <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-int <0-4294967295>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str <value>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str-arr
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str-arr <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> enable <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-bool <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-int <0-4294967295>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str <value>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str-arr
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str-arr <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-bool <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-int <0-4294967295>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str <value>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str-arr
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str-arr <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings pqc-enable <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-bool <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-int <0-4294967295>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str <value>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str-arr
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str-arr <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings window-scale <1-14>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-bool <yes|no>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-int <0-4294967295>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str <value>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str-arr
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str-arr <name>
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings tls-version
set template <name> config deviceconfig setting conn-pool-settings conn-pool <name> tls-settings tls-version <name>
set template <name> config deviceconfig setting conn-pool-settings enable <yes|no>
set template <name> config deviceconfig setting ctd enforce-application-default <yes|no>
set template <name> config deviceconfig setting ctd no-dns-udp-discard <yes|no>
set template <name> config deviceconfig setting enforce-tsa-certificate-expiry-check <yes|no>
set template <name> config deviceconfig setting global-protect region <value>
set template <name> config deviceconfig setting iot enable-device-context-segments <yes|no>
set template <name> config deviceconfig setting iot metadata-collection
set template <name> config deviceconfig setting iot metadata-collection address <value>
set template <name> config deviceconfig setting ip-defense
set template <name> config deviceconfig setting ip-defense cloud-server <value>
set template <name> config deviceconfig setting ip-defense max-latency <1-15000>
set template <name> config deviceconfig setting logging pktlog-forwarding-threshold <10-50>
set template <name> config deviceconfig setting mac-aging-timeout <10-65535>
set template <name> config deviceconfig setting management enable-midstream-appid-detection <yes|no>
set template <name> config deviceconfig setting mobility-overlapping-ip-private-apns <yes|no>
set template <name> config deviceconfig setting pae-discovery chs-address <value>
set template <name> config deviceconfig setting pae-discovery discovery-address <value>
set template <name> config deviceconfig setting pae-discovery multi-fqdn-support <yes|no>
set template <name> config deviceconfig setting pae-discovery pae-address <value>
set template <name> config deviceconfig setting pae-discovery use-fixed-chs-fqdn <yes|no>
set template <name> config deviceconfig setting pae-discovery use-fixed-pae-fqdn <yes|no>
set template <name> config deviceconfig setting session log-interval <1-672>
set template <name> config deviceconfig setting session logging <yes|no>
set template <name> config deviceconfig system default-mkey-grace-period <60-120>
set template <name> config deviceconfig system usb-port
set template <name> config deviceconfig system usb-port state <enable|disable>
set template <name> config network dhcp interface <name> relay ip overwrite
set template <name> config network dhcp interface <name> relay ip overwrite gateway <ip/netmask>|<value>
set template <name> config network dhcp interface <name> relay ip overwrite subnet-mask <value>
set template <name> config network interface aggregate-ethernet <name> layer2 port-path-cost <0-200000000>
set template <name> config network interface aggregate-ethernet <name> layer2 port-priority <0-15>
set template <name> config network interface aggregate-ethernet <name> layer2 stp-profile <value>
set template <name> config network interface aggregate-ethernet <name> layer2-switch
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp enable <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp fast-failover <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp high-availability
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp high-availability passive-pre-negotiation <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp max-ports <1-8>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp mode <passive|active>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring enable <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring min-link-ports <1-8>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring min-local-bias-ports <1-7>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp system-priority <1-65535>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lacp transmission-rate <fast|slow>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lldp
set template <name> config network interface aggregate-ethernet <name> layer2-switch lldp enable <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lldp high-availability
set template <name> config network interface aggregate-ethernet <name> layer2-switch lldp high-availability passive-pre-negotiation <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch lldp profile <value>
set template <name> config network interface aggregate-ethernet <name> layer2-switch port-path-cost <0-200000000>
set template <name> config network interface aggregate-ethernet <name> layer2-switch port-priority <0-15>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control broadcast
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control broadcast action <drop|log|error>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control broadcast rising-threshold <0-100>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control multicast
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control multicast action <drop|log|error>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control multicast rising-threshold <0-100>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control unicast
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control unicast action <drop|log|error>
set template <name> config network interface aggregate-ethernet <name> layer2-switch storm-control unicast rising-threshold <0-100>
set template <name> config network interface aggregate-ethernet <name> layer2-switch stp-profile <value>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type
set template <name> config network interface aggregate-ethernet <name> layer2-switch type access
set template <name> config network interface aggregate-ethernet <name> layer2-switch type access tag <1-4000>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk native
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk native tag <1-4000>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk native tagged-native-vlan <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk units
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk units <name>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk units <name> comment <value>
set template <name> config network interface aggregate-ethernet <name> layer2-switch type trunk units <name> tag <1-4000>
set template <name> config network interface aggregate-ethernet <name> layer3 proxy-arp
set template <name> config network interface aggregate-ethernet <name> layer3 proxy-arp address
set template <name> config network interface aggregate-ethernet <name> layer3 proxy-arp address <name>
set template <name> config network interface aggregate-ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer3 proxy-arp enabled <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer3 units <name> proxy-arp
set template <name> config network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address
set template <name> config network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address <name>
set template <name> config network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template <name> config network interface aggregate-ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template <name> config network interface cellular <name> layer3 units
set template <name> config network interface cellular <name> layer3 units <name>
set template <name> config network interface cellular <name> layer3 units <name> adjust-tcp-mss
set template <name> config network interface cellular <name> layer3 units <name> adjust-tcp-mss enable <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> adjust-tcp-mss ipv4-mss-adjustment <40-300>
set template <name> config network interface cellular <name> layer3 units <name> adjust-tcp-mss ipv6-mss-adjustment <60-300>
set template <name> config network interface cellular <name> layer3 units <name> comment <value>
set template <name> config network interface cellular <name> layer3 units <name> create-default-route <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-cert-profile <value>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-enabled <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-hostname <value>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-ip  [ <ddns-ip1> <ddns-ip2>... ]
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-ipv6  [ <ddns-ipv61> <ddns-ipv62>... ]
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-update-interval <1-30>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-vendor <value>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config <name>
set template <name> config network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config <name> value <value>
set template <name> config network interface cellular <name> layer3 units <name> default-route-metric <1-65535>
set template <name> config network interface cellular <name> layer3 units <name> df-ignore <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> interface-management-profile <value>
set template <name> config network interface cellular <name> layer3 units <name> ipv6
set template <name> config network interface cellular <name> layer3 units <name> ipv6 accept-router-advertised-routes <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> ipv6 default-route-metric <1-65535>
set template <name> config network interface cellular <name> layer3 units <name> ipv6 enabled <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> ipv6 interface-id <value>|<EUI-64>
set template <name> config network interface cellular <name> layer3 units <name> link-state <auto|up|down>
set template <name> config network interface cellular <name> layer3 units <name> mtu <576-1500>
set template <name> config network interface cellular <name> layer3 units <name> netflow-profile <value>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings enable <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings ipv6-enable <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings sdwan-interface-profile <value>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat ddns
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat enable <yes|no>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip fqdn <value>
set template <name> config network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip ip-address <value>|<ip/netmask>
set template <name> config network interface cellular <name> layer3 units <name> sim
set template <name> config network interface cellular <name> layer3 units <name> sim slot
set template <name> config network interface cellular <name> layer3 units <name> sim slot <name>
set template <name> config network interface cellular <name> layer3 units <name> sim slot <name> apn-profile <value>
set template <name> config network interface cellular <name> modem dhcp-relay <yes|no>
set template <name> config network interface cellular <name> modem max-sim-switchovers <0-10>
set template <name> config network interface cellular <name> modem sim-switch-decision-timer <10-3600>
set template <name> config network interface cluster-ethernet <name> layer3 proxy-arp
set template <name> config network interface cluster-ethernet <name> layer3 proxy-arp address
set template <name> config network interface cluster-ethernet <name> layer3 proxy-arp address <name>
set template <name> config network interface cluster-ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template <name> config network interface cluster-ethernet <name> layer3 proxy-arp enabled <yes|no>
set template <name> config network interface cluster-ethernet <name> layer3 units <name> proxy-arp
set template <name> config network interface cluster-ethernet <name> layer3 units <name> proxy-arp address
set template <name> config network interface cluster-ethernet <name> layer3 units <name> proxy-arp address <name>
set template <name> config network interface cluster-ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template <name> config network interface cluster-ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template <name> config network interface ethernet <name> fec <0|1|2|3|4|5>
set template <name> config network interface ethernet <name> layer2 port-path-cost <0-200000000>
set template <name> config network interface ethernet <name> layer2 port-priority <0-15>
set template <name> config network interface ethernet <name> layer2 stp-profile <value>
set template <name> config network interface ethernet <name> layer2-switch
set template <name> config network interface ethernet <name> layer2-switch lldp
set template <name> config network interface ethernet <name> layer2-switch lldp enable <yes|no>
set template <name> config network interface ethernet <name> layer2-switch lldp high-availability
set template <name> config network interface ethernet <name> layer2-switch lldp high-availability passive-pre-negotiation <yes|no>
set template <name> config network interface ethernet <name> layer2-switch lldp profile <value>
set template <name> config network interface ethernet <name> layer2-switch port-path-cost <0-200000000>
set template <name> config network interface ethernet <name> layer2-switch port-priority <0-15>
set template <name> config network interface ethernet <name> layer2-switch storm-control
set template <name> config network interface ethernet <name> layer2-switch storm-control broadcast
set template <name> config network interface ethernet <name> layer2-switch storm-control broadcast action <drop|log|error>
set template <name> config network interface ethernet <name> layer2-switch storm-control broadcast rising-threshold <0-100>
set template <name> config network interface ethernet <name> layer2-switch storm-control multicast
set template <name> config network interface ethernet <name> layer2-switch storm-control multicast action <drop|log|error>
set template <name> config network interface ethernet <name> layer2-switch storm-control multicast rising-threshold <0-100>
set template <name> config network interface ethernet <name> layer2-switch storm-control unicast
set template <name> config network interface ethernet <name> layer2-switch storm-control unicast action <drop|log|error>
set template <name> config network interface ethernet <name> layer2-switch storm-control unicast rising-threshold <0-100>
set template <name> config network interface ethernet <name> layer2-switch stp-profile <value>
set template <name> config network interface ethernet <name> layer2-switch type
set template <name> config network interface ethernet <name> layer2-switch type access
set template <name> config network interface ethernet <name> layer2-switch type access tag <1-4000>
set template <name> config network interface ethernet <name> layer2-switch type trunk
set template <name> config network interface ethernet <name> layer2-switch type trunk native
set template <name> config network interface ethernet <name> layer2-switch type trunk native tag <1-4000>
set template <name> config network interface ethernet <name> layer2-switch type trunk native tagged-native-vlan <yes|no>
set template <name> config network interface ethernet <name> layer2-switch type trunk units
set template <name> config network interface ethernet <name> layer2-switch type trunk units <name>
set template <name> config network interface ethernet <name> layer2-switch type trunk units <name> comment <value>
set template <name> config network interface ethernet <name> layer2-switch type trunk units <name> tag <1-4000>
set template <name> config network interface ethernet <name> layer3 proxy-arp
set template <name> config network interface ethernet <name> layer3 proxy-arp address
set template <name> config network interface ethernet <name> layer3 proxy-arp address <name>
set template <name> config network interface ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template <name> config network interface ethernet <name> layer3 proxy-arp enabled <yes|no>
set template <name> config network interface ethernet <name> layer3 units <name> proxy-arp
set template <name> config network interface ethernet <name> layer3 units <name> proxy-arp address
set template <name> config network interface ethernet <name> layer3 units <name> proxy-arp address <name>
set template <name> config network interface ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template <name> config network interface ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template <name> config network interface fail-open
set template <name> config network interface fail-open <name> enable <yes|no>
set template <name> config network interface vlan proxy-arp
set template <name> config network interface vlan proxy-arp address
set template <name> config network interface vlan proxy-arp address <name>
set template <name> config network interface vlan proxy-arp address <name> negate <yes|no>
set template <name> config network interface vlan proxy-arp enabled <yes|no>
set template <name> config network interface vlan units <name> proxy-arp
set template <name> config network interface vlan units <name> proxy-arp address
set template <name> config network interface vlan units <name> proxy-arp address <name>
set template <name> config network interface vlan units <name> proxy-arp address <name> negate <yes|no>
set template <name> config network interface vlan units <name> proxy-arp enabled <yes|no>
set template <name> config network logical-router <name> vrf <name> bgp peer-group <name> connection-options local-as <1-4294967295>
set template <name> config network logical-router <name> vrf <name> bgp peer-group <name> connection-options mode <no-prepend|no-prepend-and-replace-as>
set template <name> config network logical-router <name> vrf <name> bgp peer-group <name> peer <name> connection-options local-as <1-4294967295>|<inherit>
set template <name> config network logical-router <name> vrf <name> bgp peer-group <name> peer <name> connection-options mode <no-prepend|no-prepend-and-replace-as|inherit>
set template <name> config network profiles apn-profile
set template <name> config network profiles apn-profile <name>
set template <name> config network profiles apn-profile <name> apn <value>
set template <name> config network profiles apn-profile <name> authentication-type <CHAP|PAP|auto>
set template <name> config network profiles apn-profile <name> network-type <APN|DNN>
set template <name> config network profiles apn-profile <name> password <value>
set template <name> config network profiles apn-profile <name> pdp-type <IPv4|IPv6|both>
set template <name> config network profiles apn-profile <name> slice-differentiator <0-16777215>
set template <name> config network profiles apn-profile <name> slice-service-type <0-255>
set template <name> config network profiles apn-profile <name> username <value>
set template <name> config network profiles stp-profile
set template <name> config network profiles stp-profile <name>
set template <name> config network profiles stp-profile <name> enable <yes|no>
set template <name> config network profiles stp-profile <name> global-parameters
set template <name> config network profiles stp-profile <name> global-parameters forward-delay <4-30>
set template <name> config network profiles stp-profile <name> global-parameters hello-time <1-10>
set template <name> config network profiles stp-profile <name> global-parameters max-age <6-40>
set template <name> config network profiles stp-profile <name> global-parameters max-hops <6-40>
set template <name> config network profiles stp-profile <name> global-parameters name <value>
set template <name> config network profiles stp-profile <name> global-parameters revision <0-65535>
set template <name> config network profiles stp-profile <name> global-parameters tx-hold-count <1-10>
set template <name> config network profiles stp-profile <name> instance-parameters
set template <name> config network profiles stp-profile <name> instance-parameters bridge-priority <0-15>
set template <name> config network profiles stp-profile <name> instance-parameters instance-id <1-255>
set template <name> config network profiles stp-profile <name> port-parameters
set template <name> config network profiles stp-profile <name> port-parameters <name>
set template <name> config network profiles stp-profile <name> port-parameters <name> bpdu-guard <yes|no>
set template <name> config network profiles stp-profile <name> port-parameters <name> port-type <edge|network|point-to-point|auto>
set template <name> config network profiles stp-profile <name> port-parameters <name> root-guard <yes|no>
set template <name> config network routing-profile multicast mld-interface-query-profile
set template <name> config network routing-profile multicast mld-interface-query-profile <name>
set template <name> config network routing-profile multicast mld-interface-query-profile <name> immediate-leave <yes|no>
set template <name> config network routing-profile multicast mld-interface-query-profile <name> last-member-query-interval <1-25>
set template <name> config network routing-profile multicast mld-interface-query-profile <name> max-query-response-time <1-25>
set template <name> config network routing-profile multicast mld-interface-query-profile <name> query-interval <1-1800>
set template <name> config network secure-web-gateway explicit-web-gateway auth-timeout-secs <1-120>
set template <name> config network secure-web-gateway explicit-web-gateway basic-auth-realm <value>
set template <name> config network secure-web-gateway explicit-web-gateway enable-pop <yes|no>
set template <name> config network secure-web-gateway explicit-web-gateway ip-surrogate-minutes <0-600>
set template <name> config network tunnel global-protect-gateway <name> ikev2
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication certificate
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication certificate enable-strict-validation <yes|no>
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication master-key
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication master-key master-key-length-value <32-128>
set template <name> config network tunnel global-protect-gateway <name> ikev2 Authentication master-key master-key-value <value>
set template <name> config network tunnel global-protect-gateway <name> ikev2 ikev2-crypto-profile <value>
set template <name> config network tunnel global-protect-gateway <name> ikev2 ikev2-mode <IKEv2 Only|IKEv2 preferred>
set template <name> config network tunnel global-protect-gateway <name> ikev2 ipsec-crypto-profile <value>
set template <name> config network tunnel global-protect-gateway <name> ipsec ikev2-enable <yes|no>
set template <name> config shared admin-role <name> role device restapi device access-domain <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device admin-role-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device administrators <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device authentication-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device authentication-sequence <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device dns-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device kerberos-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device radius-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device saml-idp-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device scp-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi device tacplus-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi objects mobile-network-equipment <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi objects mobile-network-equipment-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi objects mobile-network-subscriber <enable|read-only|disable>
set template <name> config shared admin-role <name> role device restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui device iot-security device-context-segment-association <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui device setup smart-connect-ai <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui network network-profiles stp-profile <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects device-context-segment <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects mobile-network
set template <name> config shared admin-role <name> role device webui objects mobile-network equipment <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects mobile-network equipment-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects mobile-network subscriber <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects mobile-network subscriber-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects panos-shield
set template <name> config shared admin-role <name> role device webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set template <name> config shared admin-role <name> role device webui objects security-profiles ip-defense <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device access-domain <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device admin-role-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device administrators <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device authentication-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device authentication-sequence <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device dns-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device kerberos-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device radius-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device saml-idp-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device scp-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi device tacplus-server-profiles <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi objects mobile-network-equipment <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi objects mobile-network-equipment-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi objects mobile-network-subscriber <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui device iot-security device-context-segment-association <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui device setup smart-connect-ai <read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects device-context-segment <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects mobile-network
set template <name> config shared admin-role <name> role vsys webui objects mobile-network equipment <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects mobile-network equipment-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects mobile-network subscriber <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects mobile-network subscriber-group <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects panos-shield
set template <name> config shared admin-role <name> role vsys webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set template <name> config shared admin-role <name> role vsys webui objects security-profiles ip-defense <enable|read-only|disable>
set template <name> config shared dlp-settings
set template <name> config shared dlp-settings action-on-file-not-scanned <allow|block>
set template <name> config shared dlp-settings action-on-max-file-size <allow|block>
set template <name> config shared dlp-settings action-on-max-latency <allow|block>
set template <name> config shared dlp-settings enable-ftp <yes|no>
set template <name> config shared dlp-settings log-files-not-scanned <yes|no>
set template <name> config shared dlp-settings max-file-size <1-100>
set template <name> config shared dlp-settings max-latency <1-240>
set template <name> config shared non-file-based-dlp-settings
set template <name> config shared non-file-based-dlp-settings action-on-data-not-scanned <allow|block>
set template <name> config shared non-file-based-dlp-settings action-on-max-data-size <allow|block>
set template <name> config shared non-file-based-dlp-settings action-on-max-latency <allow|block>
set template <name> config shared non-file-based-dlp-settings enable-non-file-dlp <yes|no>
set template <name> config shared non-file-based-dlp-settings enable-websocket-dlp-c2s <yes|no>
set template <name> config shared non-file-based-dlp-settings log-data-not-scanned <yes|no>
set template <name> config shared non-file-based-dlp-settings max-data-size <1-500>
set template <name> config shared non-file-based-dlp-settings max-latency <1-30>
set template <name> config shared non-file-based-dlp-settings min-data-size <250-4000>
set template <name> config vsys <name> cloud-redistribution disable-ip-user-query <yes|no>
set template <name> config vsys <name> cloud-redistribution receiving <name> polling-interval <1-3600>
set template <name> config vsys <name> device-context-segment-association
set template <name> config vsys <name> device-context-segment-association <name>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc enable <yes|no>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-bool <yes|no>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-int <0-4294967295>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str <value>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str-arr
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str-arr <name>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address ipv4 <value>
set template <name> config vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address ipv6 <value>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc enable <yes|no>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-bool <yes|no>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-int <0-4294967295>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str <value>
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str-arr
set template <name> config vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str-arr <name>
set template <name> config vsys <name> sdwan-interface-profile <name> tunnel-maximum-download <float>
set template <name> config vsys <name> sdwan-interface-profile <name> tunnel-maximum-upload <float>
set template <name> config vsys <name> setting session
set template <name> config vsys <name> setting session log-interval <1-672>
set template <name> config vsys <name> setting session logging <yes|no>
set template <name> config vsys <name> zone <name> metadata-profile <value>
set template <name> config vsys <name> zone <name> network ip-defense-profile <value>
set template-stack <name> config devices <name> deviceconfig setting adns-setting disable-adns <yes|no>
set template-stack <name> config devices <name> deviceconfig setting adns-setting disable-doh <yes|no>
set template-stack <name> config devices <name> deviceconfig setting adns-setting max-latency-doh <1-15000>
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc address <ip/netmask>|<value>
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc disable-host-compliance-service <yes|no>
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc disabled <yes|no>
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc discovery-address <ip/netmask>|<value>
set template-stack <name> config devices <name> deviceconfig setting cloud-gp-svc host-compliance-service-address <ip/netmask>|<value>
set template-stack <name> config devices <name> deviceconfig setting cloud-userid discovery-service
set template-stack <name> config devices <name> deviceconfig setting cloud-userid discovery-service address <ip/netmask>|<value>
set template-stack <name> config devices <name> deviceconfig setting cloud-userid discovery-service refresh-interval <1-240>
set template-stack <name> config devices <name> deviceconfig setting cloud-userid identity-cloud-mode <icd|icmd>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings cert-verification-enable <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str <value>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str-arr
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> conn-settings params <name> value value-str-arr <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> enable <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-bool <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str <value>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str-arr
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> general-settings <name> value value-str-arr <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str <value>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str-arr
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings params <name> value value-str-arr <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> pqc-settings pqc-enable <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str <value>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str-arr
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings params <name> value value-str-arr <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tcp-settings window-scale <1-14>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str <value>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str-arr
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings params <name> value value-str-arr <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings tls-version
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings conn-pool <name> tls-settings tls-version <name>
set template-stack <name> config devices <name> deviceconfig setting conn-pool-settings enable <yes|no>
set template-stack <name> config devices <name> deviceconfig setting ctd enforce-application-default <yes|no>
set template-stack <name> config devices <name> deviceconfig setting ctd no-dns-udp-discard <yes|no>
set template-stack <name> config devices <name> deviceconfig setting enforce-tsa-certificate-expiry-check <yes|no>
set template-stack <name> config devices <name> deviceconfig setting global-protect region <value>
set template-stack <name> config devices <name> deviceconfig setting iot enable-device-context-segments <yes|no>
set template-stack <name> config devices <name> deviceconfig setting iot metadata-collection
set template-stack <name> config devices <name> deviceconfig setting iot metadata-collection address <value>
set template-stack <name> config devices <name> deviceconfig setting ip-defense
set template-stack <name> config devices <name> deviceconfig setting ip-defense cloud-server <value>
set template-stack <name> config devices <name> deviceconfig setting ip-defense max-latency <1-15000>
set template-stack <name> config devices <name> deviceconfig setting logging pktlog-forwarding-threshold <10-50>
set template-stack <name> config devices <name> deviceconfig setting mac-aging-timeout <10-65535>
set template-stack <name> config devices <name> deviceconfig setting management enable-midstream-appid-detection <yes|no>
set template-stack <name> config devices <name> deviceconfig setting mobility-overlapping-ip-private-apns <yes|no>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery chs-address <value>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery discovery-address <value>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery multi-fqdn-support <yes|no>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery pae-address <value>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery use-fixed-chs-fqdn <yes|no>
set template-stack <name> config devices <name> deviceconfig setting pae-discovery use-fixed-pae-fqdn <yes|no>
set template-stack <name> config devices <name> deviceconfig setting session log-interval <1-672>
set template-stack <name> config devices <name> deviceconfig setting session logging <yes|no>
set template-stack <name> config devices <name> deviceconfig system default-mkey-grace-period <60-120>
set template-stack <name> config devices <name> deviceconfig system usb-port
set template-stack <name> config devices <name> deviceconfig system usb-port state <enable|disable>
set template-stack <name> config devices <name> network dhcp interface <name> relay ip overwrite
set template-stack <name> config devices <name> network dhcp interface <name> relay ip overwrite gateway <ip/netmask>|<value>
set template-stack <name> config devices <name> network dhcp interface <name> relay ip overwrite subnet-mask <value>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2 port-path-cost <0-200000000>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2 port-priority <0-15>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2 stp-profile <value>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp enable <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp fast-failover <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp high-availability
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp high-availability passive-pre-negotiation <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp max-ports <1-8>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp mode <passive|active>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring enable <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring min-link-ports <1-8>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp multi-chassis-lacp-monitoring min-local-bias-ports <1-7>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp system-priority <1-65535>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lacp transmission-rate <fast|slow>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lldp
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lldp enable <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lldp high-availability
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lldp high-availability passive-pre-negotiation <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch lldp profile <value>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch port-path-cost <0-200000000>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch port-priority <0-15>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control broadcast
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control broadcast action <drop|log|error>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control broadcast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control multicast
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control multicast action <drop|log|error>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control multicast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control unicast
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control unicast action <drop|log|error>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch storm-control unicast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch stp-profile <value>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type access
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type access tag <1-4000>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk native
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk native tag <1-4000>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk native tagged-native-vlan <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk units
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk units <name>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk units <name> comment <value>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer2-switch type trunk units <name> tag <1-4000>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 proxy-arp
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 proxy-arp address
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 proxy-arp address <name>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 units <name> proxy-arp
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address <name>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface aggregate-ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> adjust-tcp-mss
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> adjust-tcp-mss enable <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> adjust-tcp-mss ipv4-mss-adjustment <40-300>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> adjust-tcp-mss ipv6-mss-adjustment <60-300>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> comment <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> create-default-route <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-cert-profile <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-enabled <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-hostname <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-ip  [ <ddns-ip1> <ddns-ip2>... ]
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-ipv6  [ <ddns-ipv61> <ddns-ipv62>... ]
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-update-interval <1-30>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-vendor <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config <name>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ddns-config ddns-vendor-config <name> value <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> default-route-metric <1-65535>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> df-ignore <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> interface-management-profile <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ipv6
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ipv6 accept-router-advertised-routes <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ipv6 default-route-metric <1-65535>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ipv6 enabled <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> ipv6 interface-id <value>|<EUI-64>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> link-state <auto|up|down>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> mtu <576-1500>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> netflow-profile <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings enable <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings ipv6-enable <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings sdwan-interface-profile <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat ddns
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat enable <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip fqdn <value>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sdwan-link-settings upstream-nat static-ip ip-address <value>|<ip/netmask>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sim
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sim slot
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sim slot <name>
set template-stack <name> config devices <name> network interface cellular <name> layer3 units <name> sim slot <name> apn-profile <value>
set template-stack <name> config devices <name> network interface cellular <name> modem dhcp-relay <yes|no>
set template-stack <name> config devices <name> network interface cellular <name> modem max-sim-switchovers <0-10>
set template-stack <name> config devices <name> network interface cellular <name> modem sim-switch-decision-timer <10-3600>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 proxy-arp
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 proxy-arp address
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 proxy-arp address <name>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 units <name> proxy-arp
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 units <name> proxy-arp address
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 units <name> proxy-arp address <name>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface cluster-ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> fec <0|1|2|3|4|5>
set template-stack <name> config devices <name> network interface ethernet <name> layer2 port-path-cost <0-200000000>
set template-stack <name> config devices <name> network interface ethernet <name> layer2 port-priority <0-15>
set template-stack <name> config devices <name> network interface ethernet <name> layer2 stp-profile <value>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch lldp
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch lldp enable <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch lldp high-availability
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch lldp high-availability passive-pre-negotiation <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch lldp profile <value>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch port-path-cost <0-200000000>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch port-priority <0-15>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control broadcast
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control broadcast action <drop|log|error>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control broadcast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control multicast
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control multicast action <drop|log|error>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control multicast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control unicast
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control unicast action <drop|log|error>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch storm-control unicast rising-threshold <0-100>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch stp-profile <value>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type access
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type access tag <1-4000>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk native
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk native tag <1-4000>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk native tagged-native-vlan <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk units
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk units <name>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk units <name> comment <value>
set template-stack <name> config devices <name> network interface ethernet <name> layer2-switch type trunk units <name> tag <1-4000>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 proxy-arp
set template-stack <name> config devices <name> network interface ethernet <name> layer3 proxy-arp address
set template-stack <name> config devices <name> network interface ethernet <name> layer3 proxy-arp address <name>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 units <name> proxy-arp
set template-stack <name> config devices <name> network interface ethernet <name> layer3 units <name> proxy-arp address
set template-stack <name> config devices <name> network interface ethernet <name> layer3 units <name> proxy-arp address <name>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 units <name> proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface ethernet <name> layer3 units <name> proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface fail-open
set template-stack <name> config devices <name> network interface fail-open <name> enable <yes|no>
set template-stack <name> config devices <name> network interface vlan proxy-arp
set template-stack <name> config devices <name> network interface vlan proxy-arp address
set template-stack <name> config devices <name> network interface vlan proxy-arp address <name>
set template-stack <name> config devices <name> network interface vlan proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface vlan proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network interface vlan units <name> proxy-arp
set template-stack <name> config devices <name> network interface vlan units <name> proxy-arp address
set template-stack <name> config devices <name> network interface vlan units <name> proxy-arp address <name>
set template-stack <name> config devices <name> network interface vlan units <name> proxy-arp address <name> negate <yes|no>
set template-stack <name> config devices <name> network interface vlan units <name> proxy-arp enabled <yes|no>
set template-stack <name> config devices <name> network logical-router <name> vrf <name> bgp peer-group <name> connection-options local-as <1-4294967295>
set template-stack <name> config devices <name> network logical-router <name> vrf <name> bgp peer-group <name> connection-options mode <no-prepend|no-prepend-and-replace-as>
set template-stack <name> config devices <name> network logical-router <name> vrf <name> bgp peer-group <name> peer <name> connection-options local-as <1-4294967295>|<inherit>
set template-stack <name> config devices <name> network logical-router <name> vrf <name> bgp peer-group <name> peer <name> connection-options mode <no-prepend|no-prepend-and-replace-as|inherit>
set template-stack <name> config devices <name> network profiles apn-profile
set template-stack <name> config devices <name> network profiles apn-profile <name>
set template-stack <name> config devices <name> network profiles apn-profile <name> apn <value>
set template-stack <name> config devices <name> network profiles apn-profile <name> authentication-type <CHAP|PAP|auto>
set template-stack <name> config devices <name> network profiles apn-profile <name> network-type <APN|DNN>
set template-stack <name> config devices <name> network profiles apn-profile <name> password <value>
set template-stack <name> config devices <name> network profiles apn-profile <name> pdp-type <IPv4|IPv6|both>
set template-stack <name> config devices <name> network profiles apn-profile <name> slice-differentiator <0-16777215>
set template-stack <name> config devices <name> network profiles apn-profile <name> slice-service-type <0-255>
set template-stack <name> config devices <name> network profiles apn-profile <name> username <value>
set template-stack <name> config devices <name> network profiles stp-profile
set template-stack <name> config devices <name> network profiles stp-profile <name>
set template-stack <name> config devices <name> network profiles stp-profile <name> enable <yes|no>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters forward-delay <4-30>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters hello-time <1-10>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters max-age <6-40>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters max-hops <6-40>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters name <value>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters revision <0-65535>
set template-stack <name> config devices <name> network profiles stp-profile <name> global-parameters tx-hold-count <1-10>
set template-stack <name> config devices <name> network profiles stp-profile <name> instance-parameters
set template-stack <name> config devices <name> network profiles stp-profile <name> instance-parameters bridge-priority <0-15>
set template-stack <name> config devices <name> network profiles stp-profile <name> instance-parameters instance-id <1-255>
set template-stack <name> config devices <name> network profiles stp-profile <name> port-parameters
set template-stack <name> config devices <name> network profiles stp-profile <name> port-parameters <name>
set template-stack <name> config devices <name> network profiles stp-profile <name> port-parameters <name> bpdu-guard <yes|no>
set template-stack <name> config devices <name> network profiles stp-profile <name> port-parameters <name> port-type <edge|network|point-to-point|auto>
set template-stack <name> config devices <name> network profiles stp-profile <name> port-parameters <name> root-guard <yes|no>
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile <name>
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile <name> immediate-leave <yes|no>
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile <name> last-member-query-interval <1-25>
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile <name> max-query-response-time <1-25>
set template-stack <name> config devices <name> network routing-profile multicast mld-interface-query-profile <name> query-interval <1-1800>
set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway auth-timeout-secs <1-120>
set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway basic-auth-realm <value>
set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway enable-pop <yes|no>
set template-stack <name> config devices <name> network secure-web-gateway explicit-web-gateway ip-surrogate-minutes <0-600>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication certificate
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication certificate enable-strict-validation <yes|no>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication master-key
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication master-key master-key-length-value <32-128>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 Authentication master-key master-key-value <value>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 ikev2-crypto-profile <value>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 ikev2-mode <IKEv2 Only|IKEv2 preferred>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ikev2 ipsec-crypto-profile <value>
set template-stack <name> config devices <name> network tunnel global-protect-gateway <name> ipsec ikev2-enable <yes|no>
set template-stack <name> config devices <name> vsys <name> cloud-redistribution disable-ip-user-query <yes|no>
set template-stack <name> config devices <name> vsys <name> cloud-redistribution receiving <name> polling-interval <1-3600>
set template-stack <name> config devices <name> vsys <name> device-context-segment-association
set template-stack <name> config devices <name> vsys <name> device-context-segment-association <name>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc enable <yes|no>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str <value>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str-arr
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc params <name> value value-str-arr <name>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address ipv4 <value>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-gateway <name> cloud-gp-svc public-address ipv6 <value>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc enable <yes|no>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-bool <yes|no>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-int <0-4294967295>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str <value>
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str-arr
set template-stack <name> config devices <name> vsys <name> global-protect global-protect-portal <name> portal-config cloud-gp-svc params <name> value value-str-arr <name>
set template-stack <name> config devices <name> vsys <name> sdwan-interface-profile <name> tunnel-maximum-download <float>
set template-stack <name> config devices <name> vsys <name> sdwan-interface-profile <name> tunnel-maximum-upload <float>
set template-stack <name> config devices <name> vsys <name> setting session
set template-stack <name> config devices <name> vsys <name> setting session log-interval <1-672>
set template-stack <name> config devices <name> vsys <name> setting session logging <yes|no>
set template-stack <name> config devices <name> vsys <name> zone <name> metadata-profile <value>
set template-stack <name> config devices <name> vsys <name> zone <name> network ip-defense-profile <value>
set template-stack <name> config shared admin-role <name> role device restapi device access-domain <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device admin-role-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device administrators <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device authentication-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device authentication-sequence <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device dns-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device kerberos-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device radius-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device saml-idp-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device scp-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi device tacplus-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi objects mobile-network-equipment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi objects mobile-network-equipment-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi objects mobile-network-subscriber <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui device iot-security device-context-segment-association <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui device setup smart-connect-ai <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui network network-profiles stp-profile <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects device-context-segment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects mobile-network
set template-stack <name> config shared admin-role <name> role device webui objects mobile-network equipment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects mobile-network equipment-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects mobile-network subscriber <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects mobile-network subscriber-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects panos-shield
set template-stack <name> config shared admin-role <name> role device webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role device webui objects security-profiles ip-defense <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device access-domain <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device admin-role-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device administrators <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device authentication-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device authentication-sequence <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device dns-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device kerberos-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device radius-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device saml-idp-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device scp-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi device tacplus-server-profiles <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi objects mobile-network-equipment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi objects mobile-network-equipment-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi objects mobile-network-subscriber <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys restapi objects mobile-network-subscriber-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui device iot-security device-context-segment-association <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui device setup smart-connect-ai <read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects device-context-segment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects mobile-network
set template-stack <name> config shared admin-role <name> role vsys webui objects mobile-network equipment <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects mobile-network equipment-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects mobile-network subscriber <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects mobile-network subscriber-group <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects panos-shield
set template-stack <name> config shared admin-role <name> role vsys webui objects panos-shield vulnerability-protection <enable|read-only|disable>
set template-stack <name> config shared admin-role <name> role vsys webui objects security-profiles ip-defense <enable|read-only|disable>
set template-stack <name> config shared dlp-settings
set template-stack <name> config shared dlp-settings action-on-file-not-scanned <allow|block>
set template-stack <name> config shared dlp-settings action-on-max-file-size <allow|block>
set template-stack <name> config shared dlp-settings action-on-max-latency <allow|block>
set template-stack <name> config shared dlp-settings enable-ftp <yes|no>
set template-stack <name> config shared dlp-settings log-files-not-scanned <yes|no>
set template-stack <name> config shared dlp-settings max-file-size <1-100>
set template-stack <name> config shared dlp-settings max-latency <1-240>
set template-stack <name> config shared non-file-based-dlp-settings
set template-stack <name> config shared non-file-based-dlp-settings action-on-data-not-scanned <allow|block>
set template-stack <name> config shared non-file-based-dlp-settings action-on-max-data-size <allow|block>
set template-stack <name> config shared non-file-based-dlp-settings action-on-max-latency <allow|block>
set template-stack <name> config shared non-file-based-dlp-settings enable-non-file-dlp <yes|no>
set template-stack <name> config shared non-file-based-dlp-settings enable-websocket-dlp-c2s <yes|no>
set template-stack <name> config shared non-file-based-dlp-settings log-data-not-scanned <yes|no>
set template-stack <name> config shared non-file-based-dlp-settings max-data-size <1-500>
set template-stack <name> config shared non-file-based-dlp-settings max-latency <1-30>
set template-stack <name> config shared non-file-based-dlp-settings min-data-size <250-4000>
set wildfire-appliance <name> deviceconfig system ssl-tls-service-profile <value>
set wildfire-appliance-cluster <name> deviceconfig system ssl-tls-service-profile <value>