>
    Strata Copilot
    CLI Jump Start
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Use the CLI
    4. CLI Jump Start
    Download PDF
    Next-Generation Firewall

    CLI Jump Start

    Table of Contents

    CLI Jump Start

    Use this quick reference to see the most common commands you will need to being managing your next-gen firewall using the command-line interface (CLI).
    Where Can I Use This?What Do I Need?
    NGFW (Managed by PAN-OS or Panorama)
    • No prerequisites needed
    The following table provides quick start information for configuring the features of Palo Alto Networks devices from the CLI. Where applicable for firewalls with multiple virtual systems (vsys), the table also shows the location to configure shared settings and vsys-specific settings.
    To configure...
    Start here...
    MGT interface
    # set deviceconfig system ip-address
    admin password
    # set mgt-config users admin password
    DNS
    # set deviceconfig system dns-setting servers
    NTP
    # set deviceconfig system ntp-servers
    Interfaces
    # set network interface
    System settings
    # set deviceconfig system
    Zones
    # set zone <name> 
# set vsys <name> zone <name>
    Security Profiles
    HIP Objects/Profiles
    URL Filtering Profiles
    WildFire Analysis Profiles
    # set profiles 
# set vsys <name> profiles 
# set shared profiles
    Server Profiles
    # set server-profile 
# set vsys <name> server-profile 
# set shared server-profile
    Authentication Profiles
    # set authentication-profile 
# set vsys <name> authentication-profile 
# set shared authentication-profile
    Certificate Profiles
    # set certificate-profile 
# set vsys <name> certificate-profile 
# set shared certificate-profile
    Policy
    # set rulebase 
# set vsys vsys1 rulebase
    Log Quotas
    # set deviceconfig setting management quota-settings
    User-ID
    # set user-id-agent 
# set vsys <name> user-id-agent 
# set user-id-collector 
# set vsys <name> user-id-collector
    HA
    # set deviceconfig high-availability
    AutoFocus Settings
    # set deviceconfig setting autofocus
    WildFire Settings
    # set deviceconfig setting wildfire
    Panorama
    # set deviceconfig system panorama-server
    Restart
    > request restart system

    © 2026 Palo Alto Networks, Inc. All rights reserved.