Set Commands Introduced in PAN-OS 10.2

Command line interface 'set' commands that are new in PAN-OS 10.2.
The following commands are new in the 10.2 release:
set deviceconfig setting ctd shared-memory-quota-url-cat <0-100> set deviceconfig setting inline-url-setting set deviceconfig setting inline-url-setting max-latency <1-240> set deviceconfig setting inline-url-setting allow-on-max-latency <yes|no> set deviceconfig setting inline-url-setting log-scan <yes|no> set deviceconfig setting inline-spyware-setting set deviceconfig setting inline-spyware-setting max-latency <1-240> set deviceconfig setting inline-spyware-setting allow-on-max-latency <yes|no> set deviceconfig setting inline-spyware-setting log-scan <yes|no> set deviceconfig setting ssl-decrypt zero-window-track <yes|no> set deviceconfig setting session erspan <yes|no> set deviceconfig setting config append-ending-token <yes|no> set deviceconfig setting management wildcard-topdown-match-mode <yes|no> set deviceconfig setting vpn ikev2 security-strength-check <yes|no> set deviceconfig setting iot edge enable-3rd-party <yes|no> set mgt-config password-complexity minimum-length <6-16> set mgt-config password-complexity minimum-length <0-16> set network profiles bfd-profile <name> min-tx-interval <100-10000> set network profiles bfd-profile <name> min-rx-interval <100-10000> set network profiles bfd-profile <name> detection-multiplier <2-255> set network ike crypto-profiles ipsec-crypto-profiles <name> dh-group <no-pfs|group1|group2|group5|group14|group15|group16|group19|group20|group21> set network tunnel gre <name> erspan <yes|no>
set network logical-router <name> vrf <name> admin-dists set network logical-router <name> vrf <name> admin-dists static <1-255> set network logical-router <name> vrf <name> admin-dists static-ipv6 <1-255> set network logical-router <name> vrf <name> admin-dists ospf-inter <1-255> set network logical-router <name> vrf <name> admin-dists ospf-intra <1-255> set network logical-router <name> vrf <name> admin-dists ospf-ext <1-255> set network logical-router <name> vrf <name> admin-dists ospfv3-inter <1-255> set network logical-router <name> vrf <name> admin-dists ospfv3-intra <1-255> set network logical-router <name> vrf <name> admin-dists ospfv3-ext <1-255> set network logical-router <name> vrf <name> admin-dists bgp-internal <1-255> set network logical-router <name> vrf <name> admin-dists bgp-external <1-255> set network logical-router <name> vrf <name> admin-dists bgp-local <1-255> set network logical-router <name> vrf <name> admin-dists rip <1-255> set network logical-router <name> vrf <name> rib-filter set network logical-router <name> vrf <name> rib-filter ipv4 set network logical-router <name> vrf <name> rib-filter ipv4 static set network logical-router <name> vrf <name> rib-filter ipv4 static route-map <value> set network logical-router <name> vrf <name> rib-filter ipv4 bgp set network logical-router <name> vrf <name> rib-filter ipv4 bgp route-map <value> set network logical-router <name> vrf <name> rib-filter ipv4 ospf set network logical-router <name> vrf <name> rib-filter ipv4 ospf route-map <value> set network logical-router <name> vrf <name> rib-filter ipv4 rip set network logical-router <name> vrf <name> rib-filter ipv4 rip route-map <value> set network logical-router <name> vrf <name> rib-filter ipv6 set network logical-router <name> vrf <name> rib-filter ipv6 static set network logical-router <name> vrf <name> rib-filter ipv6 static route-map <value> set network logical-router <name> vrf <name> rib-filter ipv6 bgp set network logical-router <name> vrf <name> rib-filter ipv6 bgp route-map <value> set network logical-router <name> vrf <name> rib-filter ipv6 ospfv3 set network logical-router <name> vrf <name> rib-filter ipv6 ospfv3 route-map <value> set network logical-router <name> vrf <name> bgp local-as <1-4294967295>|<value> set network logical-router <name> vrf <name> bgp install-route <yes|no> set network logical-router <name> vrf <name> bgp default-local-preference <0-4294967295> set network logical-router <name> vrf <name> bgp graceful-shutdown <yes|no> set network logical-router <name> vrf <name> bgp always-advertise-network-route <yes|no> set network logical-router <name> vrf <name> bgp graceful-restart local-restart-time <1-3600> set network logical-router <name> vrf <name> bgp global-bfd set network logical-router <name> vrf <name> bgp global-bfd profile <value>|<None> set network logical-router <name> vrf <name> bgp peer-group <name> address-family ipv4 <value> set network logical-router <name> vrf <name> bgp peer-group <name> address-family ipv6 <value> set network logical-router <name> vrf <name> bgp peer-group <name> filtering-profile set network logical-router <name> vrf <name> bgp peer-group <name> filtering-profile ipv4 <value> set network logical-router <name> vrf <name> bgp peer-group <name> filtering-profile ipv6 <value> set network logical-router <name> vrf <name> bgp peer-group <name> connection-options dampening <value> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> passive <yes|no> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> peer-as <1-4294967295>|<value> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit yes set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no address-family set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no address-family ipv4 <value>|<inherit|none> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no address-family ipv6 <value>|<inherit|none> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no filtering-profile set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no filtering-profile ipv4 <value>|<inherit|none> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> inherit no filtering-profile ipv6 <value>|<inherit|none> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> peer-address fqdn <value> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> connection-options dampening <value>|<inherit> set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> bfd set network logical-router <name> vrf <name> bgp peer-group <name> peer <name> bfd profile <value>|<None|Inherit-lr-global-setting> set network logical-router <name> vrf <name> bgp aggregate-routes set network logical-router <name> vrf <name> bgp aggregate-routes <name> set network logical-router <name> vrf <name> bgp aggregate-routes <name> description <value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> enable <yes|no> set network logical-router <name> vrf <name> bgp aggregate-routes <name> summary-only <yes|no> set network logical-router <name> vrf <name> bgp aggregate-routes <name> as-set <yes|no> set network logical-router <name> vrf <name> bgp aggregate-routes <name> same-med <yes|no> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv4 set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv4 summary-prefix <ip/netmask>|<value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv4 suppress-map <value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv4 attribute-map <value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv6 set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv6 summary-prefix <ip/netmask>|<value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv6 suppress-map <value> set network logical-router <name> vrf <name> bgp aggregate-routes <name> type ipv6 attribute-map <value> set network logical-router <name> vrf <name> bgp redistribution-profile set network logical-router <name> vrf <name> bgp redistribution-profile ipv4 set network logical-router <name> vrf <name> bgp redistribution-profile ipv4 unicast <value> set network logical-router <name> vrf <name> bgp redistribution-profile ipv6 set network logical-router <name> vrf <name> bgp redistribution-profile ipv6 unicast <value> set network logical-router <name> vrf <name> bgp advertise-network set network logical-router <name> vrf <name> bgp advertise-network ipv4 set network logical-router <name> vrf <name> bgp advertise-network ipv4 network set network logical-router <name> vrf <name> bgp advertise-network ipv4 network <name> set network logical-router <name> vrf <name> bgp advertise-network ipv4 network <name> unicast <yes|no> set network logical-router <name> vrf <name> bgp advertise-network ipv4 network <name> multicast <yes|no> set network logical-router <name> vrf <name> bgp advertise-network ipv4 network <name> backdoor <yes|no> set network logical-router <name> vrf <name> bgp advertise-network ipv6 set network logical-router <name> vrf <name> bgp advertise-network ipv6 network set network logical-router <name> vrf <name> bgp advertise-network ipv6 network <name> set network logical-router <name> vrf <name> bgp advertise-network ipv6 network <name> unicast <yes|no> set network logical-router <name> vrf <name> routing-table ip static-route <name> nexthop next-lr <value> set network logical-router <name> vrf <name> routing-table ip static-route <name> nexthop fqdn <value> set network logical-router <name> vrf <name> routing-table ip static-route <name> bfd set network logical-router <name> vrf <name> routing-table ip static-route <name> bfd profile <value>|<None> set network logical-router <name> vrf <name> routing-table ipv6 static-route <name> nexthop fqdn <value> set network logical-router <name> vrf <name> routing-table ipv6 static-route <name> nexthop next-lr <value> set network logical-router <name> vrf <name> routing-table ipv6 static-route <name> bfd set network logical-router <name> vrf <name> routing-table ipv6 static-route <name> bfd profile <value>|<None> set network logical-router <name> vrf <name> ospf set network logical-router <name> vrf <name> ospf router-id <ip/netmask> set network logical-router <name> vrf <name> ospf global-bfd set network logical-router <name> vrf <name> ospf global-bfd profile <value>|<None> set network logical-router <name> vrf <name> ospf enable <yes|no> set network logical-router <name> vrf <name> ospf rfc1583 <yes|no> set network logical-router <name> vrf <name> ospf spf-timer <value> set network logical-router <name> vrf <name> ospf global-if-timer <value> set network logical-router <name> vrf <name> ospf redistribution-profile <value> set network logical-router <name> vrf <name> ospf area set network logical-router <name> vrf <name> ospf area <name> set network logical-router <name> vrf <name> ospf area <name> authentication <value> set network logical-router <name> vrf <name> ospf area <name> type set network logical-router <name> vrf <name> ospf area <name> type normal set network logical-router <name> vrf <name> ospf area <name> type normal abr set network logical-router <name> vrf <name> ospf area <name> type normal abr import-list <value> set network logical-router <name> vrf <name> ospf area <name> type normal abr export-list <value> set network logical-router <name> vrf <name> ospf area <name> type normal abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type normal abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type stub set network logical-router <name> vrf <name> ospf area <name> type stub no-summary <yes|no> set network logical-router <name> vrf <name> ospf area <name> type stub abr set network logical-router <name> vrf <name> ospf area <name> type stub abr import-list <value>|<None> set network logical-router <name> vrf <name> ospf area <name> type stub abr export-list <value> set network logical-router <name> vrf <name> ospf area <name> type stub abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type stub abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type nssa set network logical-router <name> vrf <name> ospf area <name> type nssa no-summary <yes|no> set network logical-router <name> vrf <name> ospf area <name> type nssa default-information-originate set network logical-router <name> vrf <name> ospf area <name> type nssa default-information-originate metric <1-16777214> set network logical-router <name> vrf <name> ospf area <name> type nssa default-information-originate metric-type <type-1|type-2> set network logical-router <name> vrf <name> ospf area <name> type nssa abr set network logical-router <name> vrf <name> ospf area <name> type nssa abr import-list <value> set network logical-router <name> vrf <name> ospf area <name> type nssa abr export-list <value> set network logical-router <name> vrf <name> ospf area <name> type nssa abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type nssa abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospf area <name> type nssa abr nssa-ext-range set network logical-router <name> vrf <name> ospf area <name> type nssa abr nssa-ext-range <name> set network logical-router <name> vrf <name> ospf area <name> type nssa abr nssa-ext-range <name> advertise <yes|no> set network logical-router <name> vrf <name> ospf area <name> range set network logical-router <name> vrf <name> ospf area <name> range <name> set network logical-router <name> vrf <name> ospf area <name> range <name> substitute <ip/netmask> set network logical-router <name> vrf <name> ospf area <name> range <name> advertise <yes|no> set network logical-router <name> vrf <name> ospf area <name> interface set network logical-router <name> vrf <name> ospf area <name> interface <name> set network logical-router <name> vrf <name> ospf area <name> interface <name> enable <yes|no> set network logical-router <name> vrf <name> ospf area <name> interface <name> mtu-ignore <yes|no> set network logical-router <name> vrf <name> ospf area <name> interface <name> passive <yes|no> set network logical-router <name> vrf <name> ospf area <name> interface <name> priority <0-255> set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type broadcast set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type p2p set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type p2mp set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type p2mp neighbor set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type p2mp neighbor <name> set network logical-router <name> vrf <name> ospf area <name> interface <name> link-type p2mp neighbor <name> priority <1-255> set network logical-router <name> vrf <name> ospf area <name> interface <name> metric <1-65535> set network logical-router <name> vrf <name> ospf area <name> interface <name> authentication <value> set network logical-router <name> vrf <name> ospf area <name> interface <name> bfd set network logical-router <name> vrf <name> ospf area <name> interface <name> bfd profile <value>|<None|Inherit-lr-global-setting> set network logical-router <name> vrf <name> ospf area <name> interface <name> timing <value> set network logical-router <name> vrf <name> ospf area <name> virtual-link set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> neighbor-id <ip/netmask> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> transit-area-id <value> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> enable <yes|no> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> instance-id <0-255> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> timing <value> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> authentication <value> set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> bfd set network logical-router <name> vrf <name> ospf area <name> virtual-link <name> bfd profile <value>|<None|Inherit-lr-global-setting> set network logical-router <name> vrf <name> ospf graceful-restart set network logical-router <name> vrf <name> ospf graceful-restart enable <yes|no> set network logical-router <name> vrf <name> ospf graceful-restart grace-period <5-1800> set network logical-router <name> vrf <name> ospf graceful-restart helper-enable <yes|no> set network logical-router <name> vrf <name> ospf graceful-restart strict-LSA-checking <yes|no> set network logical-router <name> vrf <name> ospf graceful-restart max-neighbor-restart-time <5-1800> set network logical-router <name> vrf <name> ospfv3 set network logical-router <name> vrf <name> ospfv3 enable <yes|no> set network logical-router <name> vrf <name> ospfv3 router-id <ip/netmask> set network logical-router <name> vrf <name> ospfv3 global-bfd set network logical-router <name> vrf <name> ospfv3 global-bfd profile <value>|<None> set network logical-router <name> vrf <name> ospfv3 disable-transit-traffic <yes|no> set network logical-router <name> vrf <name> ospfv3 spf-timer <value> set network logical-router <name> vrf <name> ospfv3 global-if-timer <value> set network logical-router <name> vrf <name> ospfv3 redistribution-profile <value> set network logical-router <name> vrf <name> ospfv3 area set network logical-router <name> vrf <name> ospfv3 area <name> set network logical-router <name> vrf <name> ospfv3 area <name> authentication <value> set network logical-router <name> vrf <name> ospfv3 area <name> type set network logical-router <name> vrf <name> ospfv3 area <name> type normal set network logical-router <name> vrf <name> ospfv3 area <name> type normal abr set network logical-router <name> vrf <name> ospfv3 area <name> type normal abr import-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type normal abr export-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type normal abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type normal abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type stub set network logical-router <name> vrf <name> ospfv3 area <name> type stub no-summary <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> type stub abr set network logical-router <name> vrf <name> ospfv3 area <name> type stub abr import-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type stub abr export-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type stub abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type stub abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa set network logical-router <name> vrf <name> ospfv3 area <name> type nssa no-summary <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa default-information-originate set network logical-router <name> vrf <name> ospfv3 area <name> type nssa default-information-originate metric <1-16777214> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa default-information-originate metric-type <type-1|type-2> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr import-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr export-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr inbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr outbound-filter-list <value> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr nssa-ext-range set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr nssa-ext-range <name> set network logical-router <name> vrf <name> ospfv3 area <name> type nssa abr nssa-ext-range <name> advertise <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> range set network logical-router <name> vrf <name> ospfv3 area <name> range <name> set network logical-router <name> vrf <name> ospfv3 area <name> range <name> advertise <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> interface set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> enable <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> mtu-ignore <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> passive <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> priority <0-255> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type broadcast set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type p2p set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type p2mp set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type p2mp neighbor set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type p2mp neighbor <name> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> link-type p2mp neighbor <name> priority <1-255> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> metric <1-65535> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> instance-id <0-65535> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> authentication <value> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> bfd set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> bfd profile <value>|<None|Inherit-lr-global-setting> set network logical-router <name> vrf <name> ospfv3 area <name> interface <name> timing <value> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> neighbor-id <ip/netmask> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> transit-area-id <value> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> enable <yes|no> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> instance-id <0-65535> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> timing <value> set network logical-router <name> vrf <name> ospfv3 area <name> virtual-link <name> authentication <value> set network logical-router <name> vrf <name> ospfv3 graceful-restart set network logical-router <name> vrf <name> ospfv3 graceful-restart enable <yes|no> set network logical-router <name> vrf <name> ospfv3 graceful-restart grace-period <5-1800> set network logical-router <name> vrf <name> ospfv3 graceful-restart helper-enable <yes|no> set network logical-router <name> vrf <name> ospfv3 graceful-restart strict-LSA-checking <yes|no> set network logical-router <name> vrf <name> ospfv3 graceful-restart max-neighbor-restart-time <5-1800> set network logical-router <name> vrf <name> multicast set network logical-router <name> vrf <name> multicast enable <yes|no> set network logical-router <name> vrf <name> multicast static-route set network logical-router <name> vrf <name> multicast static-route <name> set network logical-router <name> vrf <name> multicast static-route <name> destination <value>|<ip/netmask> set network logical-router <name> vrf <name> multicast static-route <name> interface <value> set network logical-router <name> vrf <name> multicast static-route <name> nexthop set network logical-router <name> vrf <name> multicast static-route <name> nexthop ip-address <value>|<ip/netmask> set network logical-router <name> vrf <name> multicast static-route <name> preference <1-255> set network logical-router <name> vrf <name> multicast pim set network logical-router <name> vrf <name> multicast pim enable <yes|no> set network logical-router <name> vrf <name> multicast pim rpf-lookup-mode <mrib-then-urib|mrib-only|urib-only> set network logical-router <name> vrf <name> multicast pim route-ageout-time <210-7200> set network logical-router <name> vrf <name> multicast pim if-timer-global <value> set network logical-router <name> vrf <name> multicast pim group-permission <value>|<None> set network logical-router <name> vrf <name> multicast pim ssm-address-space set network logical-router <name> vrf <name> multicast pim ssm-address-space group-list <value>|<None> set network logical-router <name> vrf <name> multicast pim spt-threshold set network logical-router <name> vrf <name> multicast pim spt-threshold <name> set network logical-router <name> vrf <name> multicast pim spt-threshold <name> threshold <1-4294967295>|<never|0> set network logical-router <name> vrf <name> multicast pim interface set network logical-router <name> vrf <name> multicast pim interface <name> set network logical-router <name> vrf <name> multicast pim interface <name> description <value> set network logical-router <name> vrf <name> multicast pim interface <name> dr-priority <0-4294967295> set network logical-router <name> vrf <name> multicast pim interface <name> send-bsm <yes|no> set network logical-router <name> vrf <name> multicast pim interface <name> if-timer <value> set network logical-router <name> vrf <name> multicast pim interface <name> neighbor-filter <value>|<None> set network logical-router <name> vrf <name> multicast pim rp set network logical-router <name> vrf <name> multicast pim rp local-rp set network logical-router <name> vrf <name> multicast pim rp local-rp static-rp set network logical-router <name> vrf <name> multicast pim rp local-rp static-rp interface <value> set network logical-router <name> vrf <name> multicast pim rp local-rp static-rp address <value> set network logical-router <name> vrf <name> multicast pim rp local-rp static-rp override <yes|no> set network logical-router <name> vrf <name> multicast pim rp local-rp static-rp group-list <value>|<None> set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp interface <value> set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp address <value> set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp priority <0-255> set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp advertisement-interval <1-26214> set network logical-router <name> vrf <name> multicast pim rp local-rp candidate-rp group-list <value>|<None> set network logical-router <name> vrf <name> multicast pim rp external-rp set network logical-router <name> vrf <name> multicast pim rp external-rp <name> set network logical-router <name> vrf <name> multicast pim rp external-rp <name> group-list <value>|<None> set network logical-router <name> vrf <name> multicast pim rp external-rp <name> override <yes|no> set network logical-router <name> vrf <name> multicast igmp set network logical-router <name> vrf <name> multicast igmp enable <yes|no> set network logical-router <name> vrf <name> multicast igmp dynamic set network logical-router <name> vrf <name> multicast igmp dynamic interface set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> version <2|3> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> robustness <1|2|3|4|5|6|7> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> group-filter <value>|<None> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> max-groups <1-65535>|<unlimited> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> max-sources <1-65535>|<unlimited> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> query-profile <value> set network logical-router <name> vrf <name> multicast igmp dynamic interface <name> router-alert-policing <yes|no> set network logical-router <name> vrf <name> multicast igmp static set network logical-router <name> vrf <name> multicast igmp static <name> set network logical-router <name> vrf <name> multicast igmp static <name> interface <value> set network logical-router <name> vrf <name> multicast igmp static <name> group-address <ip/netmask> set network logical-router <name> vrf <name> multicast igmp static <name> source-address <ip/netmask> set network logical-router <name> vrf <name> rip set network logical-router <name> vrf <name> rip enable <yes|no> set network logical-router <name> vrf <name> rip default-information-originate <yes|no> set network logical-router <name> vrf <name> rip global-timer <value> set network logical-router <name> vrf <name> rip auth-profile <value> set network logical-router <name> vrf <name> rip redistribution-profile <value> set network logical-router <name> vrf <name> rip global-bfd set network logical-router <name> vrf <name> rip global-bfd profile <value>|<None> set network logical-router <name> vrf <name> rip global-inbound-distribute-list set network logical-router <name> vrf <name> rip global-inbound-distribute-list access-list <value> set network logical-router <name> vrf <name> rip global-outbound-distribute-list set network logical-router <name> vrf <name> rip global-outbound-distribute-list access-list <value> set network logical-router <name> vrf <name> rip interface set network logical-router <name> vrf <name> rip interface <name> set network logical-router <name> vrf <name> rip interface <name> enable <yes|no> set network logical-router <name> vrf <name> rip interface <name> mode <active|passive|send-only> set network logical-router <name> vrf <name> rip interface <name> split-horizon <split-horizon|no-split-horizon|no-split-horizon-with-poison-reverse> set network logical-router <name> vrf <name> rip interface <name> authentication <value> set network logical-router <name> vrf <name> rip interface <name> bfd set network logical-router <name> vrf <name> rip interface <name> bfd profile <value>|<None|Inherit-lr-global-setting> set network logical-router <name> vrf <name> rip interface <name> interface-inbound-distribute-list set network logical-router <name> vrf <name> rip interface <name> interface-inbound-distribute-list access-list <value> set network logical-router <name> vrf <name> rip interface <name> interface-inbound-distribute-list metric <1-16> set network logical-router <name> vrf <name> rip interface <name> interface-outbound-distribute-list set network logical-router <name> vrf <name> rip interface <name> interface-outbound-distribute-list access-list <value> set network logical-router <name> vrf <name> rip interface <name> interface-outbound-distribute-list metric <1-16> set network routing-profile bgp timer-profile <name> reconnect-retry-interval <1-3600> set network routing-profile bgp timer-profile <name> open-delay-time <0-240> set network routing-profile bgp address-family-profile <name> ipv4 unicast enable <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 unicast soft-reconfig-with-stored-info <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 unicast orf set network routing-profile bgp address-family-profile <name> ipv4 unicast orf orf-prefix-list <none|both|receive|send> set network routing-profile bgp address-family-profile <name> ipv4 unicast default-originate-map <value> set network routing-profile bgp address-family-profile <name> ipv4 multicast set network routing-profile bgp address-family-profile <name> ipv4 multicast enable <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast soft-reconfig-with-stored-info <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast add-path set network routing-profile bgp address-family-profile <name> ipv4 multicast add-path tx-all-paths <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast add-path tx-bestpath-per-AS <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast allowas-in set network routing-profile bgp address-family-profile <name> ipv4 multicast allowas-in origin set network routing-profile bgp address-family-profile <name> ipv4 multicast allowas-in occurrence <1-10> set network routing-profile bgp address-family-profile <name> ipv4 multicast as-override <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast default-originate <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix num_prefixes <1-4294967295> set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix threshold <1-100> set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix action set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix action warning-only set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix action restart set network routing-profile bgp address-family-profile <name> ipv4 multicast maximum-prefix action restart interval <1-65535> set network routing-profile bgp address-family-profile <name> ipv4 multicast next-hop set network routing-profile bgp address-family-profile <name> ipv4 multicast next-hop self set network routing-profile bgp address-family-profile <name> ipv4 multicast next-hop self-force set network routing-profile bgp address-family-profile <name> ipv4 multicast remove-private-AS set network routing-profile bgp address-family-profile <name> ipv4 multicast remove-private-AS all set network routing-profile bgp address-family-profile <name> ipv4 multicast remove-private-AS replace-AS set network routing-profile bgp address-family-profile <name> ipv4 multicast route-reflector-client <yes|no> set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community all set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community both set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community extended set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community large set network routing-profile bgp address-family-profile <name> ipv4 multicast send-community standard set network routing-profile bgp address-family-profile <name> ipv4 multicast orf set network routing-profile bgp address-family-profile <name> ipv4 multicast orf orf-prefix-list <none|both|receive|send> set network routing-profile bgp address-family-profile <name> ipv4 multicast default-originate-map <value> set network routing-profile bgp address-family-profile <name> ipv6 unicast enable <yes|no> set network routing-profile bgp address-family-profile <name> ipv6 unicast soft-reconfig-with-stored-info <yes|no> set network routing-profile bgp address-family-profile <name> ipv6 unicast orf set network routing-profile bgp address-family-profile <name> ipv6 unicast orf orf-prefix-list <none|both|receive|send> set network routing-profile bgp address-family-profile <name> ipv6 unicast default-originate-map <value> set network routing-profile bgp redistribution-profile <name> ipv4 unicast static route-map <value> set network routing-profile bgp redistribution-profile <name> ipv4 unicast connected route-map <value> set network routing-profile bgp redistribution-profile <name> ipv4 unicast ospf set network routing-profile bgp redistribution-profile <name> ipv4 unicast ospf enable <yes|no> set network routing-profile bgp redistribution-profile <name> ipv4 unicast ospf metric <1-65535> set network routing-profile bgp redistribution-profile <name> ipv4 unicast ospf route-map <value> set network routing-profile bgp redistribution-profile <name> ipv4 unicast rip set network routing-profile bgp redistribution-profile <name> ipv4 unicast rip enable <yes|no> set network routing-profile bgp redistribution-profile <name> ipv4 unicast rip metric <1-65535> set network routing-profile bgp redistribution-profile <name> ipv4 unicast rip route-map <value> set network routing-profile bgp redistribution-profile <name> ipv6 unicast static route-map <value> set network routing-profile bgp redistribution-profile <name> ipv6 unicast connected route-map <value> set network routing-profile bgp redistribution-profile <name> ipv6 unicast ospfv3 set network routing-profile bgp redistribution-profile <name> ipv6 unicast ospfv3 enable <yes|no> set network routing-profile bgp redistribution-profile <name> ipv6 unicast ospfv3 metric <1-65535> set network routing-profile bgp redistribution-profile <name> ipv6 unicast ospfv3 route-map <value> set network routing-profile bgp filtering-profile set network routing-profile bgp filtering-profile <name> set network routing-profile bgp filtering-profile <name> description <value> set network routing-profile bgp filtering-profile <name> ipv4 set network routing-profile bgp filtering-profile <name> ipv4 unicast set network routing-profile bgp filtering-profile <name> ipv4 unicast filter-list set network routing-profile bgp filtering-profile <name> ipv4 unicast filter-list inbound <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast filter-list outbound <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast inbound-network-filters set network routing-profile bgp filtering-profile <name> ipv4 unicast inbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast inbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast outbound-network-filters set network routing-profile bgp filtering-profile <name> ipv4 unicast outbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast outbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast route-maps set network routing-profile bgp filtering-profile <name> ipv4 unicast route-maps inbound <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast route-maps outbound <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement exist set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement exist exist-map <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement non-exist set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement non-exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast conditional-advertisement non-exist non-exist-map <value> set network routing-profile bgp filtering-profile <name> ipv4 unicast unsuppress-map <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast set network routing-profile bgp filtering-profile <name> ipv4 multicast inherit <yes|no> set network routing-profile bgp filtering-profile <name> ipv4 multicast filter-list set network routing-profile bgp filtering-profile <name> ipv4 multicast filter-list inbound <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast filter-list outbound <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast inbound-network-filters set network routing-profile bgp filtering-profile <name> ipv4 multicast inbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast inbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast outbound-network-filters set network routing-profile bgp filtering-profile <name> ipv4 multicast outbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast outbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast route-maps set network routing-profile bgp filtering-profile <name> ipv4 multicast route-maps inbound <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast route-maps outbound <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement exist set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement exist exist-map <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement non-exist set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement non-exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast conditional-advertisement non-exist non-exist-map <value> set network routing-profile bgp filtering-profile <name> ipv4 multicast unsuppress-map <value> set network routing-profile bgp filtering-profile <name> ipv6 set network routing-profile bgp filtering-profile <name> ipv6 unicast set network routing-profile bgp filtering-profile <name> ipv6 unicast filter-list set network routing-profile bgp filtering-profile <name> ipv6 unicast filter-list inbound <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast filter-list outbound <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast inbound-network-filters set network routing-profile bgp filtering-profile <name> ipv6 unicast inbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast inbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast outbound-network-filters set network routing-profile bgp filtering-profile <name> ipv6 unicast outbound-network-filters distribute-list <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast outbound-network-filters prefix-list <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast route-maps set network routing-profile bgp filtering-profile <name> ipv6 unicast route-maps inbound <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast route-maps outbound <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement exist set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement exist exist-map <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement non-exist set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement non-exist advertise-map <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast conditional-advertisement non-exist non-exist-map <value> set network routing-profile bgp filtering-profile <name> ipv6 unicast unsuppress-map <value> set network routing-profile bgp dampening-profile set network routing-profile bgp dampening-profile <name> set network routing-profile bgp dampening-profile <name> description <value> set network routing-profile bgp dampening-profile <name> half-life <1-45> set network routing-profile bgp dampening-profile <name> reuse-limit <1-20000> set network routing-profile bgp dampening-profile <name> suppress-limit <1-20000> set network routing-profile bgp dampening-profile <name> max-suppress-limit <1-255> set network routing-profile ospf set network routing-profile ospf auth-profile set network routing-profile ospf auth-profile <name> set network routing-profile ospf auth-profile <name> password <value> set network routing-profile ospf auth-profile <name> md5 set network routing-profile ospf auth-profile <name> md5 <name> set network routing-profile ospf auth-profile <name> md5 <name> key <value> set network routing-profile ospf auth-profile <name> md5 <name> preferred <yes|no> set network routing-profile ospf if-timer-profile set network routing-profile ospf if-timer-profile <name> set network routing-profile ospf if-timer-profile <name> hello-interval <1-3600> set network routing-profile ospf if-timer-profile <name> dead-counts <3-20> set network routing-profile ospf if-timer-profile <name> retransmit-interval <1-1800> set network routing-profile ospf if-timer-profile <name> transit-delay <1-1800> set network routing-profile ospf if-timer-profile <name> gr-delay <1-10> set network routing-profile ospf spf-timer-profile set network routing-profile ospf spf-timer-profile <name> set network routing-profile ospf spf-timer-profile <name> lsa-interval <1-10> set network routing-profile ospf spf-timer-profile <name> spf-calculation-delay <0-600> set network routing-profile ospf spf-timer-profile <name> initial-hold-time <0-600> set network routing-profile ospf spf-timer-profile <name> max-hold-time <0-600> set network routing-profile ospf redistribution-profile set network routing-profile ospf redistribution-profile <name> set network routing-profile ospf redistribution-profile <name> static set network routing-profile ospf redistribution-profile <name> static enable <yes|no> set network routing-profile ospf redistribution-profile <name> static metric <1-65535> set network routing-profile ospf redistribution-profile <name> static metric-type <type-1|type-2> set network routing-profile ospf redistribution-profile <name> static route-map <value> set network routing-profile ospf redistribution-profile <name> connected set network routing-profile ospf redistribution-profile <name> connected enable <yes|no> set network routing-profile ospf redistribution-profile <name> connected metric <1-65535> set network routing-profile ospf redistribution-profile <name> connected metric-type <type-1|type-2> set network routing-profile ospf redistribution-profile <name> connected route-map <value> set network routing-profile ospf redistribution-profile <name> bgp set network routing-profile ospf redistribution-profile <name> bgp enable <yes|no> set network routing-profile ospf redistribution-profile <name> bgp metric <0-4294967295> set network routing-profile ospf redistribution-profile <name> bgp metric-type <type-1|type-2> set network routing-profile ospf redistribution-profile <name> bgp route-map <value> set network routing-profile ospf redistribution-profile <name> default-route set network routing-profile ospf redistribution-profile <name> default-route always <yes|no> set network routing-profile ospf redistribution-profile <name> default-route enable <yes|no> set network routing-profile ospf redistribution-profile <name> default-route metric <0-4294967295> set network routing-profile ospf redistribution-profile <name> default-route metric-type <type-1|type-2> set network routing-profile ospf redistribution-profile <name> rip set network routing-profile ospf redistribution-profile <name> rip enable <yes|no> set network routing-profile ospf redistribution-profile <name> rip metric <0-4294967295> set network routing-profile ospf redistribution-profile <name> rip metric-type <type-1|type-2> set network routing-profile ospf redistribution-profile <name> rip route-map <value> set network routing-profile ospfv3 set network routing-profile ospfv3 auth-profile set network routing-profile ospfv3 auth-profile <name> set network routing-profile ospfv3 auth-profile <name> spi <value> set network routing-profile ospfv3 auth-profile <name> esp set network routing-profile ospfv3 auth-profile <name> esp authentication set network routing-profile ospfv3 auth-profile <name> esp authentication md5 set network routing-profile ospfv3 auth-profile <name> esp authentication md5 key <value> set network routing-profile ospfv3 auth-profile <name> esp authentication sha1 set network routing-profile ospfv3 auth-profile <name> esp authentication sha1 key <value> set network routing-profile ospfv3 auth-profile <name> esp authentication sha256 set network routing-profile ospfv3 auth-profile <name> esp authentication sha256 key <value> set network routing-profile ospfv3 auth-profile <name> esp authentication sha384 set network routing-profile ospfv3 auth-profile <name> esp authentication sha384 key <value> set network routing-profile ospfv3 auth-profile <name> esp authentication sha512 set network routing-profile ospfv3 auth-profile <name> esp authentication sha512 key <value> set network routing-profile ospfv3 auth-profile <name> esp authentication none set network routing-profile ospfv3 auth-profile <name> esp encryption set network routing-profile ospfv3 auth-profile <name> esp encryption algorithm <3des|aes-128-cbc|aes-192-cbc|aes-256-cbc|null> set network routing-profile ospfv3 auth-profile <name> esp encryption key <value> set network routing-profile ospfv3 auth-profile <name> ah set network routing-profile ospfv3 auth-profile <name> ah md5 set network routing-profile ospfv3 auth-profile <name> ah md5 key <value> set network routing-profile ospfv3 auth-profile <name> ah sha1 set network routing-profile ospfv3 auth-profile <name> ah sha1 key <value> set network routing-profile ospfv3 auth-profile <name> ah sha256 set network routing-profile ospfv3 auth-profile <name> ah sha256 key <value> set network routing-profile ospfv3 auth-profile <name> ah sha384 set network routing-profile ospfv3 auth-profile <name> ah sha384 key <value> set network routing-profile ospfv3 auth-profile <name> ah sha512 set network routing-profile ospfv3 auth-profile <name> ah sha512 key <value> set network routing-profile ospfv3 if-timer-profile set network routing-profile ospfv3 if-timer-profile <name> set network routing-profile ospfv3 if-timer-profile <name> hello-interval <1-3600> set network routing-profile ospfv3 if-timer-profile <name> dead-counts <3-20> set network routing-profile ospfv3 if-timer-profile <name> retransmit-interval <1-1800> set network routing-profile ospfv3 if-timer-profile <name> transit-delay <1-1800> set network routing-profile ospfv3 if-timer-profile <name> gr-delay <1-10> set network routing-profile ospfv3 spf-timer-profile set network routing-profile ospfv3 spf-timer-profile <name> set network routing-profile ospfv3 spf-timer-profile <name> lsa-interval <1-10> set network routing-profile ospfv3 spf-timer-profile <name> spf-calculation-delay <0-600> set network routing-profile ospfv3 spf-timer-profile <name> initial-hold-time <0-600> set network routing-profile ospfv3 spf-timer-profile <name> max-hold-time <0-600> set network routing-profile ospfv3 redistribution-profile set network routing-profile ospfv3 redistribution-profile <name> set network routing-profile ospfv3 redistribution-profile <name> static set network routing-profile ospfv3 redistribution-profile <name> static enable <yes|no> set network routing-profile ospfv3 redistribution-profile <name> static metric <1-65535> set network routing-profile ospfv3 redistribution-profile <name> static metric-type <type-1|type-2> set network routing-profile ospfv3 redistribution-profile <name> static route-map <value> set network routing-profile ospfv3 redistribution-profile <name> connected set network routing-profile ospfv3 redistribution-profile <name> connected enable <yes|no> set network routing-profile ospfv3 redistribution-profile <name> connected metric <1-65535> set network routing-profile ospfv3 redistribution-profile <name> connected metric-type <type-1|type-2> set network routing-profile ospfv3 redistribution-profile <name> connected route-map <value> set network routing-profile ospfv3 redistribution-profile <name> bgp set network routing-profile ospfv3 redistribution-profile <name> bgp enable <yes|no> set network routing-profile ospfv3 redistribution-profile <name> bgp metric <0-4294967295> set network routing-profile ospfv3 redistribution-profile <name> bgp metric-type <type-1|type-2> set network routing-profile ospfv3 redistribution-profile <name> bgp route-map <value> set network routing-profile ospfv3 redistribution-profile <name> default-route set network routing-profile ospfv3 redistribution-profile <name> default-route always <yes|no> set network routing-profile ospfv3 redistribution-profile <name> default-route enable <yes|no> set network routing-profile ospfv3 redistribution-profile <name> default-route metric <0-4294967295> set network routing-profile ospfv3 redistribution-profile <name> default-route metric-type <type-1|type-2> set network routing-profile filters set network routing-profile filters access-list set network routing-profile filters access-list <name> set network routing-profile filters access-list <name> description <value> set network routing-profile filters access-list <name> type set network routing-profile filters access-list <name> type ipv4 set network routing-profile filters access-list <name> type ipv4 ipv4-entry set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> action <deny|permit> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> source-address set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> source-address address <any> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> source-address entry set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> source-address entry address <ip/netmask>|<validate>|<value> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> source-address entry wildcard <ip/netmask>|<validate>|<value> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> destination-address set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> destination-address address <any> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> destination-address entry set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> destination-address entry address <ip/netmask>|<validate>|<value> set network routing-profile filters access-list <name> type ipv4 ipv4-entry <name> destination-address entry wildcard <ip/netmask>|<validate>|<value> set network routing-profile filters access-list <name> type ipv6 set network routing-profile filters access-list <name> type ipv6 ipv6-entry set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> action <deny|permit> set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> source-address set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> source-address address <any> set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> source-address entry set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> source-address entry address <ip/netmask>|<value> set network routing-profile filters access-list <name> type ipv6 ipv6-entry <name> source-address entry exact-match <yes|no> set network routing-profile filters prefix-list set network routing-profile filters prefix-list <name> set network routing-profile filters prefix-list <name> description <value> set network routing-profile filters prefix-list <name> type set network routing-profile filters prefix-list <name> type ipv4 set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> action <deny|permit> set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix network <any> set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix entry set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix entry network <ip/netmask>|<value> set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix entry greater-than-or-equal <0-32> set network routing-profile filters prefix-list <name> type ipv4 ipv4-entry <name> prefix entry less-than-or-equal <0-32> set network routing-profile filters prefix-list <name> type ipv6 set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> action <deny|permit> set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix network <any> set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix entry set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix entry network <ip/netmask>|<value> set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix entry greater-than-or-equal <0-128> set network routing-profile filters prefix-list <name> type ipv6 ipv6-entry <name> prefix entry less-than-or-equal <0-128> set network routing-profile filters as-path-access-list set network routing-profile filters as-path-access-list <name> set network routing-profile filters as-path-access-list <name> description <value> set network routing-profile filters as-path-access-list <name> aspath-entry set network routing-profile filters as-path-access-list <name> aspath-entry <name> set network routing-profile filters as-path-access-list <name> aspath-entry <name> action <deny|permit> set network routing-profile filters as-path-access-list <name> aspath-entry <name> aspath-regex <value> set network routing-profile filters community-list set network routing-profile filters community-list <name> set network routing-profile filters community-list <name> description <value> set network routing-profile filters community-list <name> type set network routing-profile filters community-list <name> type regular set network routing-profile filters community-list <name> type regular regular-entry set network routing-profile filters community-list <name> type regular regular-entry <name> set network routing-profile filters community-list <name> type regular regular-entry <name> action <deny|permit> set network routing-profile filters community-list <name> type regular regular-entry <name> community [ <community1> <community2>... ] set network routing-profile filters community-list <name> type large set network routing-profile filters community-list <name> type large large-entry set network routing-profile filters community-list <name> type large large-entry <name> set network routing-profile filters community-list <name> type large large-entry <name> action <deny|permit> set network routing-profile filters community-list <name> type large large-entry <name> lc-regex [ <lc-regex1> <lc-regex2>... ] set network routing-profile filters community-list <name> type extended set network routing-profile filters community-list <name> type extended extended-entry set network routing-profile filters community-list <name> type extended extended-entry <name> set network routing-profile filters community-list <name> type extended extended-entry <name> action <deny|permit> set network routing-profile filters community-list <name> type extended extended-entry <name> ec-regex [ <ec-regex1> <ec-regex2>... ] set network routing-profile filters route-maps set network routing-profile filters route-maps bgp set network routing-profile filters route-maps bgp bgp-entry set network routing-profile filters route-maps bgp bgp-entry <name> set network routing-profile filters route-maps bgp bgp-entry <name> description <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> action <deny|permit> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> description <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match as-path-access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match regular-community <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match large-community <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match extended-community <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match interface <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match origin <none|egp|igp|incomplete> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match local-preference <0-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match peer <value>|<none|local> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 address set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 next-hop set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 route-source set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 route-source access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv4 route-source prefix-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 address set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 next-hop set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set aggregator set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set aggregator as <1-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set aggregator router-id <ip/netmask> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set local-preference <0-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set weight <0-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set origin <none|egp|igp|incomplete> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set atomic-aggregate <yes|no> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set metric set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set originator-id <ip/netmask> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set aspath-prepend [ <aspath-prepend1> <aspath-prepend2>... ] set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set regular-community [ <regular-community1> <regular-community2>... ] set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set large-community [ <large-community1> <large-community2>... ] set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv4 set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv4 source-address <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv4 next-hop <ip/netmask>|<validate>|<none|unchanged|peer-address> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv6 set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv6 source-address <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv6 next-hop <ip/netmask>|<validate>|<none|peer-address> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set ipv6-nexthop-prefer-global <yes|no> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set aspath-exclude [ <aspath-exclude1> <aspath-exclude2>... ] set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set overwrite-regular-community <yes|no> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set overwrite-large-community <yes|no> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set remove-regular-community <value> set network routing-profile filters route-maps bgp bgp-entry <name> route-map <name> set remove-large-community <value> set network routing-profile filters route-maps redistribution set network routing-profile filters route-maps redistribution redist-entry set network routing-profile filters route-maps redistribution redist-entry <name> set network routing-profile filters route-maps redistribution redist-entry <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match as-path-access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match regular-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match large-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match extended-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match peer <value>|<none|local> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 route-source set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 route-source access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> match ipv4 route-source prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set metric-type <type-1|type-2> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospf route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match as-path-access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match regular-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match large-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match extended-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match peer <value>|<none|local> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 address set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set metric-type <type-1|type-2> set network routing-profile filters route-maps redistribution redist-entry <name> bgp ospfv3 route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match as-path-access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match regular-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match large-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match extended-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match peer <value>|<none|local> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 route-source set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 route-source access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> match ipv4 route-source prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set metric value <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set next-hop <ip/netmask>|<validate>|<none|unchanged> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rip route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match as-path-access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match regular-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match large-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match extended-community <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match peer <value>|<none|local> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 route-source set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 route-source access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv4 route-source prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 address set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> bgp rib route-map <name> set source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set aggregator set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set aggregator as <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set aggregator router-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set weight <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set atomic-aggregate <yes|no> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set originator-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set aspath-prepend [ <aspath-prepend1> <aspath-prepend2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set regular-community [ <regular-community1> <regular-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set large-community [ <large-community1> <large-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set ipv4 source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf bgp route-map <name> set ipv4 next-hop <ip/netmask>|<validate>|<none|unchanged|peer-address> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set metric value <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set next-hop <ip/netmask>|<validate>|<none|unchanged> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rip route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> ospf rib route-map <name> set source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set aggregator set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set aggregator as <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set aggregator router-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set weight <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set atomic-aggregate <yes|no> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set originator-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set aspath-prepend [ <aspath-prepend1> <aspath-prepend2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set regular-community [ <regular-community1> <regular-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set large-community [ <large-community1> <large-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set ipv6 source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 bgp route-map <name> set ipv6 next-hop <ip/netmask>|<validate>|<none|peer-address> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> ospfv3 rib route-map <name> set source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match metric <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set aggregator set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set aggregator as <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set aggregator router-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set weight <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set atomic-aggregate <yes|no> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set originator-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set aspath-prepend [ <aspath-prepend1> <aspath-prepend2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set regular-community [ <regular-community1> <regular-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set large-community [ <large-community1> <large-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set ipv4 source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip bgp route-map <name> set ipv4 next-hop <ip/netmask>|<validate>|<none|unchanged|peer-address> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match metric <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set metric-type <type-1|type-2> set network routing-profile filters route-maps redistribution redist-entry <name> rip ospf route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match metric <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match address set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match next-hop set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> match next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> rip rib route-map <name> set source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set aggregator set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set aggregator as <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set aggregator router-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set local-preference <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set weight <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set origin <none|egp|igp|incomplete> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set atomic-aggregate <yes|no> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set originator-id <ip/netmask> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set aspath-prepend [ <aspath-prepend1> <aspath-prepend2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set regular-community [ <regular-community1> <regular-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set large-community [ <large-community1> <large-community2>... ] set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv4 source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv4 next-hop <ip/netmask>|<validate>|<none|unchanged|peer-address> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv6 source-address <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static bgp route-map <name> set ipv6 next-hop <ip/netmask>|<validate>|<none|peer-address> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set metric-type <type-1|type-2> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospf route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set metric value <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set metric-type <type-1|type-2> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static ospfv3 route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set metric set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set metric value <0-16> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set metric action <set|add|subtract> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set next-hop <ip/netmask>|<validate>|<none|unchanged> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rip route-map <name> set tag <1-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> action <deny|permit> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> description <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match interface <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match metric <0-4294967295> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv4 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 address set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 address access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 address prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 next-hop set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 next-hop access-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> match ipv6 next-hop prefix-list <value> set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> set set network routing-profile filters route-maps redistribution redist-entry <name> connected-static rib route-map <name> set source-address <value>
set network routing-profile bfd set network routing-profile bfd<name> set network routing-profile bfd <name> mode <active|passive> set network routing-profile bfd <name> min-tx-interval <100-10000> set network routing-profile bfd <name> min-rx-interval <100-10000> set network routing-profile bfd <name> detection-multiplier <2-255> set network routing-profile bfd <name> hold-time <0-120000> set network routing-profile bfd <name> multihop set network routing-profile bfd <name> multihop min-received-ttl <1-254> set network routing-profile multicast set network routing-profile multicast pim-interface-timer-profile set network routing-profile multicast pim-interface-timer-profile <name> set network routing-profile multicast pim-interface-timer-profile <name> assert-interval <0-65534> set network routing-profile multicast pim-interface-timer-profile <name> hello-interval <1-180> set network routing-profile multicast pim-interface-timer-profile <name> join-prune-interval <60-600> set network routing-profile multicast igmp-interface-query-profile set network routing-profile multicast igmp-interface-query-profile <name> set network routing-profile multicast igmp-interface-query-profile <name> max-query-response-time <1-25> set network routing-profile multicast igmp-interface-query-profile <name> query-interval <1-1800> set network routing-profile multicast igmp-interface-query-profile <name> last-member-query-interval <1-25> set network routing-profile multicast igmp-interface-query-profile <name> immediate-leave <yes|no> set network routing-profile rip set network routing-profile rip auth-profile set network routing-profile rip auth-profile <name> set network routing-profile rip auth-profile <name> password <value> set network routing-profile rip auth-profile <name> md5 set network routing-profile rip auth-profile <name> md5 <name> set network routing-profile rip auth-profile <name> md5 <name> key <value> set network routing-profile rip auth-profile <name> md5 <name> preferred <yes|no> set network routing-profile rip global-timer-profile set network routing-profile rip global-timer-profile <name> set network routing-profile rip global-timer-profile <name> update-intervals <5-2147483647> set network routing-profile rip global-timer-profile <name> expire-intervals <5-2147483647> set network routing-profile rip global-timer-profile <name> delete-intervals <5-2147483647> set network routing-profile rip redistribution-profile set network routing-profile rip redistribution-profile <name> set network routing-profile rip redistribution-profile <name> static set network routing-profile rip redistribution-profile <name> static enable <yes|no> set network routing-profile rip redistribution-profile <name> static metric <1-65535> set network routing-profile rip redistribution-profile <name> static route-map <value> set network routing-profile rip redistribution-profile <name> connected set network routing-profile rip redistribution-profile <name> connected enable <yes|no> set network routing-profile rip redistribution-profile <name> connected metric <1-65535> set network routing-profile rip redistribution-profile <name> connected route-map <value> set network routing-profile rip redistribution-profile <name> bgp set network routing-profile rip redistribution-profile <name> bgp enable <yes|no> set network routing-profile rip redistribution-profile <name> bgp metric <0-4294967295> set network routing-profile rip redistribution-profile <name> bgp route-map <value> set network routing-profile rip redistribution-profile <name> ospf set network routing-profile rip redistribution-profile <name> ospf enable <yes|no> set network routing-profile rip redistribution-profile <name> ospf metric <0-4294967295> set network routing-profile rip redistribution-profile <name> ospf route-map <value> set shared reports <name> type threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|monitortag|users|category-of-threatid|threat-type> set shared reports <name> type url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|device_name|vsys_name|url|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid>
set shared server-profile scp set shared server-profile scp <name> set shared server-profile scp <name> server <value> set shared server-profile scp <name> port <1-65535> set shared server-profile scp <name> username <value> set shared server-profile scp <name> password <value> set shared server-profile scp <name> path <value> set shared server-profile scp <name> fingerprint <value> set shared admin-role <name> role device webui network routing routing-profiles bfd <enable|read-only|disable> set shared admin-role <name> role device webui network routing routing-profiles ospf <enable|read-only|disable> set shared admin-role <name> role device webui network routing routing-profiles ospfv3 <enable|read-only|disable> set shared admin-role <name> role device webui network routing routing-profiles ripv2 <enable|read-only|disable> set shared admin-role <name> role device webui network routing routing-profiles filters <enable|read-only|disable> set shared admin-role <name> role device webui network routing routing-profiles multicast <enable|read-only|disable> set shared admin-role <name> role device webui device server-profile scp <enable|read-only|disable> set shared admin-role <name> role device webui operations download-pcap-files <enable|disable> set shared admin-role <name> role device restapi device snmp-trap-server-profiles <enable|read-only|disable> set shared admin-role <name> role device restapi device syslog-server-profiles <enable|read-only|disable> set shared admin-role <name> role device restapi device email-server-profiles <enable|read-only|disable> set shared admin-role <name> role device restapi device http-server-profiles <enable|read-only|disable> set shared admin-role <name> role device restapi device ldap-server-profiles <enable|read-only|disable> set display-name <value>
There are 6 new set setting commands.
set setting set setting nat set setting nat reserve-ip<yes|no> set setting nat reserve-time <1-604800> set setting ssl-decrypt set setting ssl-decrypt allow-forward-decrypted-content <yes|no>
There are 21 new set import commands.
set import set import dns-proxy<value> set import network set import network interface [ <interface1> <interface2>... ] set import network virtual-wire [ <virtual-wire1> <virtual-wire2>... ] set import network vlan [ <vlan1> <vlan2>... ] set import network virtual-router [ <virtual-router1> <virtual-router2>... ] set import network logical-router [ <logical-router1> <logical-router2>... ] set import resource set import resource max-sessions <1-4194290> set import resource max-site-to-site-vpn-tunnels <0-10000> set import resource max-concurrent-ssl-vpn-tunnels <0-65535> set import resource max-security-rules <0-65000> set import resource max-nat-rules <0-16000> set import resource max-ssl-decryption-rules <0-5000> set import resource max-qos-rules <0-8000> set import resource max-application-override-rules <0-4000> set import resource max-pbf-rules <0-2000> set import resource max-auth-rules <0-8000> set import resource max-dos-rules <0-2000> set import resource max-sdwan-rules <0-2000>
There are 9 new set route commands.
set route set route service set route service<name> set route service <name> source set route service <name> source interface <value> set route service <name> source address <value> set route service <name> source-v6 set route service <name> source-v6 interface <value> set route service <name> source-v6 address <value>
There are 27 new set dns-proxy commands.
set dns-proxy set dns-proxy<name> set dns-proxy <name> enabled <yes|no> set dns-proxy <name> interface [ <interface1> <interface2>... ] set dns-proxy <name> server-profile <value> set dns-proxy <name> domain-servers set dns-proxy <name> domain-servers <name> set dns-proxy <name> domain-servers <name> cacheable <yes|no> set dns-proxy <name> domain-servers <name> domain-name [ <domain-name1> <domain-name2>... ] set dns-proxy <name> domain-servers <name> server-profile <value> set dns-proxy <name> cache set dns-proxy <name> cache enabled <yes|no> set dns-proxy <name> cache cache-edns <yes|no> set dns-proxy <name> cache max-ttl set dns-proxy <name> cache max-ttl enabled <yes|no> set dns-proxy <name> cache max-ttl time-to-live <60-86400> set dns-proxy <name> static-entries set dns-proxy <name> static-entries <name> set dns-proxy <name> static-entries <name> domain <value> set dns-proxy <name> static-entries <name> address [ <address1> <address2>... ] set dns-proxy <name> tcp-queries set dns-proxy <name> tcp-queries enabled <yes|no> set dns-proxy <name> tcp-queries max-pending-requests <64-256> set dns-proxy <name> udp-queries set dns-proxy <name> udp-queries retries set dns-proxy <name> udp-queries retries interval <1-30> set dns-proxy <name> udp-queries retries attempts <1-30> set url-content-types [ <url-content-types1> <url-content-types2>... ]
There are 6 new set ts-agent commands.
set ts-agent set ts-agent<name> set ts-agent <name> host <ip/netmask>|<value> set ts-agent <name> port <1-65535> set ts-agent <name> ip-list [ <ip-list1> <ip-list2>... ] set ts-agent <name> disabled <yes|no>
There are 15 new set redistribution-agent commands.
set redistribution-agent set redistribution-agent<name> set redistribution-agent <name> serial-number <value> set redistribution-agent <name> host-port set redistribution-agent <name> host-port host <ip/netmask>|<value> set redistribution-agent <name> host-port ldap-proxy <yes|no> set redistribution-agent <name> host-port port <1-65535> set redistribution-agent <name> host-port collectorname <value> set redistribution-agent <name> host-port secret <value> set redistribution-agent <name> disabled <yes|no> set redistribution-agent <name> ip-user-mappings <yes|no> set redistribution-agent <name> ip-tags <yes|no> set redistribution-agent <name> user-tags <yes|no> set redistribution-agent <name> hip <yes|no> set redistribution-agent <name> quarantine-list <yes|no>
There are 6 new set ipuser-include-exclude-list commands.
set ipuser-include-exclude-list set ipuser-include-exclude-list include-exclude-network set ipuser-include-exclude-list include-exclude-network<name> set ipuser-include-exclude-list include-exclude-network <name> disabled <yes|no> set ipuser-include-exclude-list include-exclude-network <name> discovery <include|exclude> set ipuser-include-exclude-list include-exclude-network <name> network-address <ip/netmask>
There are 6 new set iptag-include-exclude-list commands.
set iptag-include-exclude-list set iptag-include-exclude-list include-exclude-network set iptag-include-exclude-list include-exclude-network<name> set iptag-include-exclude-list include-exclude-network <name> disabled <yes|no> set iptag-include-exclude-list include-exclude-network <name> discovery <include|exclude> set iptag-include-exclude-list include-exclude-network <name> network-address <ip/netmask>
There are 4 new set redistribution-collector commands.
set redistribution-collector set redistribution-collector setting set redistribution-collector setting collectorname<value> set redistribution-collector setting secret <value>
There are 2 new set user-id-ssl-auth commands.
set user-id-ssl-auth set user-id-ssl-auth certificate-profile<value>
There are 44 new set vm-info-source commands.
set vm-info-source set vm-info-source<name> set vm-info-source <name> AWS-VPC set vm-info-source <name> AWS-VPC description <value> set vm-info-source <name> AWS-VPC disabled <yes|no> set vm-info-source <name> AWS-VPC source <value> set vm-info-source <name> AWS-VPC access-key-id <value> set vm-info-source <name> AWS-VPC secret-access-key <value> set vm-info-source <name> AWS-VPC update-interval <60-1200> set vm-info-source <name> AWS-VPC vm-info-timeout-enable <yes|no> set vm-info-source <name> AWS-VPC vm-info-timeout <2-10> set vm-info-source <name> AWS-VPC vpc-id <value> set vm-info-source <name> Google-Compute-Engine set vm-info-source <name> Google-Compute-Engine description <value> set vm-info-source <name> Google-Compute-Engine disabled <yes|no> set vm-info-source <name> Google-Compute-Engine service-auth-type set vm-info-source <name> Google-Compute-Engine service-auth-type service-in-gce set vm-info-source <name> Google-Compute-Engine service-auth-type service-account set vm-info-source <name> Google-Compute-Engine service-auth-type service-account service-account-cred <value> set vm-info-source <name> Google-Compute-Engine project-id <value> set vm-info-source <name> Google-Compute-Engine zone-name <value> set vm-info-source <name> Google-Compute-Engine update-interval <60-1200> set vm-info-source <name> Google-Compute-Engine vm-info-timeout-enable <yes|no> set vm-info-source <name> Google-Compute-Engine vm-info-timeout <2-10> set vm-info-source <name> VMware-ESXi set vm-info-source <name> VMware-ESXi description <value> set vm-info-source <name> VMware-ESXi port <1-65535> set vm-info-source <name> VMware-ESXi disabled <yes|no> set vm-info-source <name> VMware-ESXi vm-info-timeout-enable <yes|no> set vm-info-source <name> VMware-ESXi vm-info-timeout <2-10> set vm-info-source <name> VMware-ESXi source <ip/netmask>|<value> set vm-info-source <name> VMware-ESXi username <value> set vm-info-source <name> VMware-ESXi password <value> set vm-info-source <name> VMware-ESXi update-interval <5-600> set vm-info-source <name> VMware-vCenter set vm-info-source <name> VMware-vCenter description <value> set vm-info-source <name> VMware-vCenter port <1-65535> set vm-info-source <name> VMware-vCenter disabled <yes|no> set vm-info-source <name> VMware-vCenter vm-info-timeout-enable <yes|no> set vm-info-source <name> VMware-vCenter vm-info-timeout <2-10> set vm-info-source <name> VMware-vCenter source <ip/netmask>|<value> set vm-info-source <name> VMware-vCenter username <value> set vm-info-source <name> VMware-vCenter password <value> set vm-info-source <name> VMware-vCenter update-interval <5-600>
There are 28 new set group-mapping commands.
set group-mapping set group-mapping<name> set group-mapping <name> server-profile <value> set group-mapping <name> disabled <yes|no> set group-mapping <name> use-ldap-for-serialno-check <yes|no> set group-mapping <name> use-modify-timestamp <yes|no> set group-mapping <name> limited-group-search <yes|no> set group-mapping <name> nested-group-level <1-20> set group-mapping <name> group-filter <value> set group-mapping <name> user-filter <value> set group-mapping <name> domain <value> set group-mapping <name> update-interval <60-86400> set group-mapping <name> group-object [ <group-object1> <group-object2>... ] set group-mapping <name> group-member [ <group-member1> <group-member2>... ] set group-mapping <name> group-name [ <group-name1> <group-name2>... ] set group-mapping <name> user-object [ <user-object1> <user-object2>... ] set group-mapping <name> user-name [ <user-name1> <user-name2>... ] set group-mapping <name> user-email [ <user-email1> <user-email2>... ] set group-mapping <name> group-email [ <group-email1> <group-email2>... ] set group-mapping <name> alternate-user-name-1 [ <alternate-user-name-11> <alternate-user-name-12>... ] set group-mapping <name> alternate-user-name-2 [ <alternate-user-name-21> <alternate-user-name-22>... ] set group-mapping <name> alternate-user-name-3 [ <alternate-user-name-31> <alternate-user-name-32>... ] set group-mapping <name> container-object [ <container-object1> <container-object2>... ] set group-mapping <name> last-modify-attr [ <last-modify-attr1> <last-modify-attr2>... ] set group-mapping <name> group-include-list [ <group-include-list1> <group-include-list2>... ] set group-mapping <name> custom-group set group-mapping <name> custom-group <name> set group-mapping <name> custom-group <name> ldap-filter <value>
There are 15 new set cloud-identity-engine commands.
set cloud-identity-engine set cloud-identity-engine<name> set cloud-identity-engine <name> region <value> set cloud-identity-engine <name> cloud-identity-engine-instance <value> set cloud-identity-engine <name> domain <value> set cloud-identity-engine <name> update-interval <5-1440> set cloud-identity-engine <name> enabled <yes|no> set cloud-identity-engine <name> primary-user <value> set cloud-identity-engine <name> user-email <value> set cloud-identity-engine <name> alt-username-1 <value> set cloud-identity-engine <name> alt-username-2 <value> set cloud-identity-engine <name> alt-username-3 <value> set cloud-identity-engine <name> group-name <value> set cloud-identity-engine <name> group-email <value> set cloud-identity-engine <name> endpoint-serial-number <value>
There are 16 new set captive-portal commands.
set captive-portal set captive-portal enable-captive-portal<yes|no> set captive-portal idle-timer <1-1440> set captive-portal timer <1-1440> set captive-portal redirect-host <ip/netmask>|<value> set captive-portal ssl-tls-service-profile <value> set captive-portal gp-udp-port <1-65535> set captive-portal mode set captive-portal mode transparent set captive-portal mode redirect set captive-portal mode redirect session-cookie set captive-portal mode redirect session-cookie enable <yes|no> set captive-portal mode redirect session-cookie timeout <60-10080> set captive-portal mode redirect session-cookie roaming <yes|no> set captive-portal authentication-profile <value> set captive-portal certificate-profile <value>
There are 58 new set user-id-collector commands.
set user-id-collector set user-id-collector setting set user-id-collector setting wmi-account<value> set user-id-collector setting wmi-password <value> set user-id-collector setting domain-name <value> set user-id-collector setting server-profile <value> set user-id-collector setting enable-security-log <yes|no> set user-id-collector setting security-log-interval <1-3600> set user-id-collector setting enable-session <yes|no> set user-id-collector setting session-interval <1-3600> set user-id-collector setting edirectory-query-interval <1-3600> set user-id-collector setting enable-probing <yes|no> set user-id-collector setting client-probing-interval <1-1440> set user-id-collector setting enable-mapping-timeout <yes|no> set user-id-collector setting ip-user-mapping-timeout <1-1440> set user-id-collector setting enable-user-match <yes|no> set user-id-collector setting syslog-service-profile <value> set user-id-collector syslog-parse-profile set user-id-collector syslog-parse-profile <name> set user-id-collector syslog-parse-profile <name> description <value> set user-id-collector syslog-parse-profile <name> regex-identifier set user-id-collector syslog-parse-profile <name> regex-identifier event-regex <value> set user-id-collector syslog-parse-profile <name> regex-identifier username-regex <value> set user-id-collector syslog-parse-profile <name> regex-identifier address-regex <value> set user-id-collector syslog-parse-profile <name> field-identifier set user-id-collector syslog-parse-profile <name> field-identifier event-string <value> set user-id-collector syslog-parse-profile <name> field-identifier username-prefix <value> set user-id-collector syslog-parse-profile <name> field-identifier username-delimiter <value> set user-id-collector syslog-parse-profile <name> field-identifier address-prefix <value> set user-id-collector syslog-parse-profile <name> field-identifier address-delimiter <value> set user-id-collector syslog-parse-profile <name> field-identifier address-per-log <1-3> set user-id-collector server-monitor set user-id-collector server-monitor <name> set user-id-collector server-monitor <name> description <value> set user-id-collector server-monitor <name> disabled <yes|no> set user-id-collector server-monitor <name> active-directory set user-id-collector server-monitor <name> active-directory type <WMI|WinRM-HTTP|WinRM-HTTPS> set user-id-collector server-monitor <name> active-directory host <ip/netmask>|<value> set user-id-collector server-monitor <name> exchange set user-id-collector server-monitor <name> exchange type <WMI|WinRM-HTTP|WinRM-HTTPS> set user-id-collector server-monitor <name> exchange host <ip/netmask>|<value> set user-id-collector server-monitor <name> e-directory set user-id-collector server-monitor <name> e-directory server-profile <value> set user-id-collector server-monitor <name> syslog set user-id-collector server-monitor <name> syslog address <ip/netmask> set user-id-collector server-monitor <name> syslog connection-type <udp|ssl> set user-id-collector server-monitor <name> syslog syslog-parse-profile set user-id-collector server-monitor <name> syslog syslog-parse-profile <name> set user-id-collector server-monitor <name> syslog syslog-parse-profile <name> event-type <login|logout> set user-id-collector server-monitor <name> syslog default-domain-name <value> set user-id-collector include-exclude-network set user-id-collector include-exclude-network <name> set user-id-collector include-exclude-network <name> disabled <yes|no> set user-id-collector include-exclude-network <name> discovery <include|exclude> set user-id-collector include-exclude-network <name> network-address <ip/netmask> set user-id-collector include-exclude-network-sequence set user-id-collector include-exclude-network-sequence include-exclude-network [ <include-exclude-network1> <include-exclude-network2>... ] set user-id-collector ignore-user [ <ignore-user1> <ignore-user2>... ]
There are 7 new set url-admin-override commands.
set url-admin-override set url-admin-override password<value> set url-admin-override ssl-tls-service-profile <value> set url-admin-override mode set url-admin-override mode transparent set url-admin-override mode redirect set url-admin-override mode redirect address <ip/netmask>|<value>
There are 19 new set zone commands.
set zone set zone<name> set zone <name> enable-user-identification <yes|no> set zone <name> enable-device-identification <yes|no> set zone <name> network set zone <name> network zone-protection-profile <value> set zone <name> network enable-packet-buffer-protection <yes|no> set zone <name> network log-setting <value> set zone <name> network tap [ <tap1> <tap2>... ] set zone <name> network virtual-wire [ <virtual-wire1> <virtual-wire2>... ] set zone <name> network layer2 [ <layer21> <layer22>... ] set zone <name> network layer3 [ <layer31> <layer32>... ] set zone <name> network tunnel set zone <name> user-acl set zone <name> user-acl include-list [ <include-list1> <include-list2>... ] set zone <name> user-acl exclude-list [ <exclude-list1> <exclude-list2>... ] set zone <name> device-acl set zone <name> device-acl include-list [ <include-list1> <include-list2>... ] set zone <name> device-acl exclude-list [ <exclude-list1> <exclude-list2>... ]
There are 14 new set sdwan-interface-profile commands.
set sdwan-interface-profile set sdwan-interface-profile<name> set sdwan-interface-profile <name> link-tag <value> set sdwan-interface-profile <name> link-type <ADSL/DSL|Cablemodem|Ethernet|Fiber|LTE/3G/4G/5G|MPLS|Microwave/Radio|Satellite|WiFi|Other> set sdwan-interface-profile <name> vpn-data-tunnel-support <yes|no> set sdwan-interface-profile <name> maximum-download <float> set sdwan-interface-profile <name> maximum-upload <float> set sdwan-interface-profile <name> error-correction <yes|no> set sdwan-interface-profile <name> path-monitoring <Aggressive|Relaxed> set sdwan-interface-profile <name> vpn-failover-metric <1-65535> set sdwan-interface-profile <name> probe-frequency <1-5> set sdwan-interface-profile <name> probe-idle-time <1-86400> set sdwan-interface-profile <name> failback-hold-time <20-120> set sdwan-interface-profile <name> comment <value> set disable-inspect <yes|no>
There are 3 new set x-authenticated-user commands.
set x-authenticated-user set x-authenticated-user enabled<yes|no> set x-authenticated-user source [ <source1> <source2>... ]
There are 331 new set global-protect commands.
set global-protect set global-protect global-protect-portal set global-protect global-protect-portal<name> set global-protect global-protect-portal <name> portal-config set global-protect global-protect-portal <name> portal-config local-address set global-protect global-protect-portal <name> portal-config local-address ip-address-family <ipv4|ipv6|ipv4_ipv6> set global-protect global-protect-portal <name> portal-config local-address interface <value> set global-protect global-protect-portal <name> portal-config local-address ip set global-protect global-protect-portal <name> portal-config local-address ip ipv4 <value> set global-protect global-protect-portal <name> portal-config local-address ip ipv6 <value> set global-protect global-protect-portal <name> portal-config local-address floating-ip set global-protect global-protect-portal <name> portal-config local-address floating-ip ipv4 <value> set global-protect global-protect-portal <name> portal-config local-address floating-ip ipv6 <value> set global-protect global-protect-portal <name> portal-config ssl-tls-service-profile <value> set global-protect global-protect-portal <name> portal-config client-auth set global-protect global-protect-portal <name> portal-config client-auth <name> set global-protect global-protect-portal <name> portal-config client-auth <name> os <value>|<Any|Browser|Satellite> set global-protect global-protect-portal <name> portal-config client-auth <name> authentication-profile <value> set global-protect global-protect-portal <name> portal-config client-auth <name> auto-retrieve-passcode <yes|no> set global-protect global-protect-portal <name> portal-config client-auth <name> username-label <value> set global-protect global-protect-portal <name> portal-config client-auth <name> password-label <value> set global-protect global-protect-portal <name> portal-config client-auth <name> authentication-message <value> set global-protect global-protect-portal <name> portal-config client-auth <name> user-credential-or-client-cert-required <no|yes> set global-protect global-protect-portal <name> portal-config certificate-profile <value> set global-protect global-protect-portal <name> portal-config custom-login-page <value> set global-protect global-protect-portal <name> portal-config custom-home-page <value> set global-protect global-protect-portal <name> portal-config custom-help-page <value> set global-protect global-protect-portal <name> portal-config log-success <yes|no> set global-protect global-protect-portal <name> portal-config log-fail <yes|no> set global-protect global-protect-portal <name> portal-config log-setting <value> set global-protect global-protect-portal <name> portal-config config-selection set global-protect global-protect-portal <name> portal-config config-selection certificate-profile <value> set global-protect global-protect-portal <name> portal-config config-selection custom-checks set global-protect global-protect-portal <name> portal-config config-selection custom-checks windows set global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key set global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key <name> set global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key <name> registry-value [ <registry-value1> <registry-value2>... ] set global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os set global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist set global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist <name> set global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist <name> key [ <key1> <key2>... ] set global-protect global-protect-portal <name> clientless-vpn set global-protect global-protect-portal <name> clientless-vpn hostname <value> set global-protect global-protect-portal <name> clientless-vpn security-zone <value> set global-protect global-protect-portal <name> clientless-vpn login-lifetime set global-protect global-protect-portal <name> clientless-vpn login-lifetime minutes <60-1440> set global-protect global-protect-portal <name> clientless-vpn login-lifetime hours <1-24> set global-protect global-protect-portal <name> clientless-vpn inactivity-logout set global-protect global-protect-portal <name> clientless-vpn inactivity-logout minutes <5-1440> set global-protect global-protect-portal <name> clientless-vpn inactivity-logout hours <1-24> set global-protect global-protect-portal <name> clientless-vpn max-user <1-30000> set global-protect global-protect-portal <name> clientless-vpn dns-proxy <value> set global-protect global-protect-portal <name> clientless-vpn crypto-settings set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol min-version <sslv3|tls1-0|tls1-1|tls1-2> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol max-version <sslv3|tls1-0|tls1-1|tls1-2|max> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-rsa <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-dhe <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-ecdhe <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-3des <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-rc4 <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-128-cbc <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-256-cbc <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-128-gcm <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-256-gcm <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-md5 <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha1 <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha256 <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha384 <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification set global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-expired-certificate <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-untrusted-issuer <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-unknown-cert <yes|no> set global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-timeout-cert <yes|no> set global-protect global-protect-portal <name> clientless-vpn rewrite-exclude-domain-list [ <rewrite-exclude-domain-list1> <rewrite-exclude-domain-list2>... ] set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> source-user [ <source-user1> <source-user2>... ] set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> applications [ <applications1> <applications2>... ] set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> enable-custom-app-URL-address-bar <yes|no> set global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> display-global-protect-agent-download-link <yes|no> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> domains [ <domains1> <domains2>... ] set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> use-proxy <yes|no> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server server <value> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server port <1-65535> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server user <value> set global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server password <value> set global-protect global-protect-portal <name> client-config set global-protect global-protect-portal <name> client-config root-ca set global-protect global-protect-portal <name> client-config root-ca <name> set global-protect global-protect-portal <name> client-config root-ca <name> install-in-cert-store <yes|no> set global-protect global-protect-portal <name> client-config agent-user-override-key <value> set global-protect global-protect-portal <name> client-config configs set global-protect global-protect-portal <name> client-config configs <name> set global-protect global-protect-portal <name> client-config configs <name> save-user-credentials <0|1|2|3> set global-protect global-protect-portal <name> client-config configs <name> portal-2fa <yes|no> set global-protect global-protect-portal <name> client-config configs <name> internal-gateway-2fa <yes|no> set global-protect global-protect-portal <name> client-config configs <name> auto-discovery-external-gateway-2fa <yes|no> set global-protect global-protect-portal <name> client-config configs <name> manual-only-gateway-2fa <yes|no> set global-protect global-protect-portal <name> client-config configs <name> source-user [ <source-user1> <source-user2>... ] set global-protect global-protect-portal <name> client-config configs <name> certificate set global-protect global-protect-portal <name> client-config configs <name> certificate criteria set global-protect global-protect-portal <name> client-config configs <name> certificate criteria certificate-profile <value> set global-protect global-protect-portal <name> client-config configs <name> custom-checks set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> default-value-data <value> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> negate <yes|no> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name> value-data <value> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name> negate <yes|no> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> negate <yes|no> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name> value <value> set global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name> negate <yes|no> set global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno set global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno no set global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno yes set global-protect global-protect-portal <name> client-config configs <name> refresh-config <yes|no> set global-protect global-protect-portal <name> client-config configs <name> gateways set global-protect global-protect-portal <name> client-config configs <name> gateways internal set global-protect global-protect-portal <name> client-config configs <name> gateways internal list set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> fqdn <value> set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip ipv4 <value> set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip ipv6 <value> set global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> source-ip [ <source-ip1> <source-ip2>... ] set global-protect global-protect-portal <name> client-config configs <name> gateways internal dhcp-option-code [ <dhcp-option-code1> <dhcp-option-code2>... ] set global-protect global-protect-portal <name> client-config configs <name> gateways external set global-protect global-protect-portal <name> client-config configs <name> gateways external cutoff-time <0-10> set global-protect global-protect-portal <name> client-config configs <name> gateways external list set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> fqdn <value> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip ipv4 <value> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip ipv6 <value> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule <name> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule <name> priority <0|1|2|3|4|5> set global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> manual <yes|no> set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection ip-address <ip/netmask> set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection hostname <value> set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6 set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6 ip-address <ip/netmask> set global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6 hostname <value> set global-protect global-protect-portal <name> client-config configs <name> agent-ui set global-protect global-protect-portal <name> client-config configs <name> agent-ui passcode <value> set global-protect global-protect-portal <name> client-config configs <name> agent-ui uninstall-password <value> set global-protect global-protect-portal <name> client-config configs <name> agent-ui agent-user-override-timeout <0-65535> set global-protect global-protect-portal <name> client-config configs <name> agent-ui max-agent-user-overrides <0-65535> set global-protect global-protect-portal <name> client-config configs <name> agent-ui welcome-page set global-protect global-protect-portal <name> client-config configs <name> agent-ui welcome-page page <value> set global-protect global-protect-portal <name> client-config configs <name> hip-collection set global-protect global-protect-portal <name> client-config configs <name> hip-collection certificate-profile <value> set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor <name> set global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor <name> product [ <product1> <product2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key <name> set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key <name> registry-value [ <registry-value1> <registry-value2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows process-list [ <process-list1> <process-list2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist <name> set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist <name> key [ <key1> <key2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os process-list [ <process-list1> <process-list2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks linux set global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks linux process-list [ <process-list1> <process-list2>... ] set global-protect global-protect-portal <name> client-config configs <name> hip-collection max-wait-time <10-60> set global-protect global-protect-portal <name> client-config configs <name> hip-collection collect-hip-data <yes|no> set global-protect global-protect-portal <name> client-config configs <name> third-party-vpn-clients [ <third-party-vpn-clients1> <third-party-vpn-clients2>... ] set global-protect global-protect-portal <name> client-config configs <name> agent-config set global-protect global-protect-portal <name> client-config configs <name> gp-app-config set global-protect global-protect-portal <name> client-config configs <name> gp-app-config config set global-protect global-protect-portal <name> client-config configs <name> gp-app-config config <name> set global-protect global-protect-portal <name> client-config configs <name> gp-app-config config <name> value [ <value1> <value2>... ] set global-protect global-protect-portal <name> client-config configs <name> os [ <os1> <os2>... ] set global-protect global-protect-portal <name> client-config configs <name> mdm-address <value> set global-protect global-protect-portal <name> client-config configs <name> mdm-enrollment-port <443|7443|8443> set global-protect global-protect-portal <name> client-config configs <name> client-certificate set global-protect global-protect-portal <name> client-config configs <name> client-certificate local <value> set global-protect global-protect-portal <name> client-config configs <name> client-certificate scep <value> set global-protect global-protect-portal <name> client-config configs <name> authentication-override set global-protect global-protect-portal <name> client-config configs <name> authentication-override generate-cookie <yes|no> set global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie set global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime set global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-days <1-365> set global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-hours <1-72> set global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-minutes <1-59> set global-protect global-protect-portal <name> client-config configs <name> authentication-override cookie-encrypt-decrypt-cert <value> set global-protect global-protect-portal <name> satellite-config set global-protect global-protect-portal <name> satellite-config root-ca [ <root-ca1> <root-ca2>... ] set global-protect global-protect-portal <name> satellite-config client-certificate set global-protect global-protect-portal <name> satellite-config client-certificate local set global-protect global-protect-portal <name> satellite-config client-certificate local issuing-certificate <value> set global-protect global-protect-portal <name> satellite-config client-certificate local ocsp-responder <value> set global-protect global-protect-portal <name> satellite-config client-certificate local certificate-life-time <7-365> set global-protect global-protect-portal <name> satellite-config client-certificate local certificate-renewal-period <3-30> set global-protect global-protect-portal <name> satellite-config client-certificate scep set global-protect global-protect-portal <name> satellite-config client-certificate scep scep <value> set global-protect global-protect-portal <name> satellite-config client-certificate scep certificate-renewal-period <3-30> set global-protect global-protect-portal <name> satellite-config configs set global-protect global-protect-portal <name> satellite-config configs <name> set global-protect global-protect-portal <name> satellite-config configs <name> devices [ <devices1> <devices2>... ] set global-protect global-protect-portal <name> satellite-config configs <name> source-user [ <source-user1> <source-user2>... ] set global-protect global-protect-portal <name> satellite-config configs <name> gateways set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> fqdn <value> set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip ipv4 <value> set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip ipv6 <value> set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ipv6-preferred <yes|no> set global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> priority <1-25> set global-protect global-protect-portal <name> satellite-config configs <name> config-refresh-interval <1-48> set global-protect global-protect-gateway set global-protect global-protect-gateway <name> set global-protect global-protect-gateway <name> remote-user-tunnel <value> set global-protect global-protect-gateway <name> remote-user-tunnel-configs set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-user [ <source-user1> <source-user2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override generate-cookie <yes|no> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-days <1-365> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-hours <1-72> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-minutes <1-59> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override cookie-encrypt-decrypt-cert <value> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> os [ <os1> <os2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address region [ <region1> <region2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address ip-address [ <ip-address1> <ip-address2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> dns-server [ <dns-server1> <dns-server2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> dns-suffix [ <dns-suffix1> <dns-suffix2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> ip-pool [ <ip-pool1> <ip-pool2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling access-route [ <access-route1> <access-route2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-access-route [ <exclude-access-route1> <exclude-access-route2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-applications [ <include-applications1> <include-applications2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list <name> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list <name> ports [ <ports1> <ports2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-applications [ <exclude-applications1> <exclude-applications2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list <name> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list <name> ports [ <ports1> <ports2>... ] set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> no-direct-access-to-local-network <yes|no> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> retrieve-framed-ip-address <yes|no> set global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-server-ip-pool [ <authentication-server-ip-pool1> <authentication-server-ip-pool2>... ] set global-protect global-protect-gateway <name> ssl-tls-service-profile <value> set global-protect global-protect-gateway <name> client-auth set global-protect global-protect-gateway <name> client-auth <name> set global-protect global-protect-gateway <name> client-auth <name> os <value>|<Any|Satellite|X-Auth> set global-protect global-protect-gateway <name> client-auth <name> authentication-profile <value> set global-protect global-protect-gateway <name> client-auth <name> auto-retrieve-passcode <yes|no> set global-protect global-protect-gateway <name> client-auth <name> username-label <value> set global-protect global-protect-gateway <name> client-auth <name> password-label <value> set global-protect global-protect-gateway <name> client-auth <name> authentication-message <value> set global-protect global-protect-gateway <name> client-auth <name> user-credential-or-client-cert-required <no|yes> set global-protect global-protect-gateway <name> certificate-profile <value> set global-protect global-protect-gateway <name> satellite-tunnel <value> set global-protect global-protect-gateway <name> tunnel-mode <yes|no> set global-protect global-protect-gateway <name> local-address set global-protect global-protect-gateway <name> local-address ip-address-family <ipv4|ipv6|ipv4_ipv6> set global-protect global-protect-gateway <name> local-address interface <value> set global-protect global-protect-gateway <name> local-address ip set global-protect global-protect-gateway <name> local-address ip ipv4 <value> set global-protect global-protect-gateway <name> local-address ip ipv6 <value> set global-protect global-protect-gateway <name> local-address floating-ip set global-protect global-protect-gateway <name> local-address floating-ip ipv4 <value> set global-protect global-protect-gateway <name> local-address floating-ip ipv6 <value> set global-protect global-protect-gateway <name> security-restrictions set global-protect global-protect-gateway <name> security-restrictions disallow-automatic-restoration <yes|no> set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement enable <yes|no> set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement default set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom source-ipv4-netmask <0-32> set global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom source-ipv6-netmask <0-128> set global-protect global-protect-gateway <name> block-quarantined-devices <yes|no> set global-protect global-protect-gateway <name> roles set global-protect global-protect-gateway <name> roles <name> set global-protect global-protect-gateway <name> roles <name> login-lifetime set global-protect global-protect-gateway <name> roles <name> login-lifetime minutes <120-43200> set global-protect global-protect-gateway <name> roles <name> login-lifetime hours <2-720> set global-protect global-protect-gateway <name> roles <name> login-lifetime days <1-30> set global-protect global-protect-gateway <name> roles <name> inactivity-logout <5-43200> set global-protect global-protect-gateway <name> hip-notification set global-protect global-protect-gateway <name> hip-notification <name> set global-protect global-protect-gateway <name> hip-notification <name> match-message set global-protect global-protect-gateway <name> hip-notification <name> match-message include-app-list <yes|no> set global-protect global-protect-gateway <name> hip-notification <name> match-message show-notification-as <system-tray-balloon|pop-up-message> set global-protect global-protect-gateway <name> hip-notification <name> match-message message <value> set global-protect global-protect-gateway <name> hip-notification <name> not-match-message set global-protect global-protect-gateway <name> hip-notification <name> not-match-message show-notification-as <system-tray-balloon|pop-up-message> set global-protect global-protect-gateway <name> hip-notification <name> not-match-message message <value> set global-protect global-protect-gateway <name> log-success <yes|no> set global-protect global-protect-gateway <name> log-fail <yes|no> set global-protect global-protect-gateway <name> log-setting <value> set global-protect global-protect-mdm set global-protect global-protect-mdm <name> set global-protect global-protect-mdm <name> disabled <yes|no> set global-protect global-protect-mdm <name> host <value> set global-protect global-protect-mdm <name> port <1-65535> set global-protect global-protect-mdm <name> root-ca [ <root-ca1> <root-ca2>... ] set global-protect global-protect-mdm <name> client-certificate <value> set global-protect clientless-app set global-protect clientless-app <name> set global-protect clientless-app <name> application-home-url <value> set global-protect clientless-app <name> description <value> set global-protect clientless-app <name> app-icon <value> set global-protect clientless-app-group set global-protect clientless-app-group <name> set global-protect clientless-app-group <name> members [ <members1> <members2>... ]
There are 612 new set profiles commands.
set profiles set profiles hip-objects set profiles hip-objects<name> set profiles hip-objects <name> description <value> set profiles hip-objects <name> host-info set profiles hip-objects <name> host-info criteria set profiles hip-objects <name> host-info criteria domain set profiles hip-objects <name> host-info criteria domain contains <value> set profiles hip-objects <name> host-info criteria domain is <value> set profiles hip-objects <name> host-info criteria domain is-not <value> set profiles hip-objects <name> host-info criteria os set profiles hip-objects <name> host-info criteria os contains set profiles hip-objects <name> host-info criteria os contains Microsoft <value> set profiles hip-objects <name> host-info criteria os contains Apple <value> set profiles hip-objects <name> host-info criteria os contains Google <value> set profiles hip-objects <name> host-info criteria os contains Linux <value> set profiles hip-objects <name> host-info criteria os contains Other <value> set profiles hip-objects <name> host-info criteria client-version set profiles hip-objects <name> host-info criteria client-version contains <value> set profiles hip-objects <name> host-info criteria client-version is <value> set profiles hip-objects <name> host-info criteria client-version is-not <value> set profiles hip-objects <name> host-info criteria host-name set profiles hip-objects <name> host-info criteria host-name contains <value> set profiles hip-objects <name> host-info criteria host-name is <value> set profiles hip-objects <name> host-info criteria host-name is-not <value> set profiles hip-objects <name> host-info criteria host-id set profiles hip-objects <name> host-info criteria host-id contains <value> set profiles hip-objects <name> host-info criteria host-id is <value> set profiles hip-objects <name> host-info criteria host-id is-not <value> set profiles hip-objects <name> host-info criteria managed <no|yes> set profiles hip-objects <name> host-info criteria serial-number set profiles hip-objects <name> host-info criteria serial-number contains <value> set profiles hip-objects <name> host-info criteria serial-number is <value> set profiles hip-objects <name> host-info criteria serial-number is-not <value> set profiles hip-objects <name> network-info set profiles hip-objects <name> network-info criteria set profiles hip-objects <name> network-info criteria network set profiles hip-objects <name> network-info criteria network is set profiles hip-objects <name> network-info criteria network is wifi set profiles hip-objects <name> network-info criteria network is wifi ssid <value> set profiles hip-objects <name> network-info criteria network is mobile set profiles hip-objects <name> network-info criteria network is mobile carrier <value> set profiles hip-objects <name> network-info criteria network is unknown set profiles hip-objects <name> network-info criteria network is-not set profiles hip-objects <name> network-info criteria network is-not wifi set profiles hip-objects <name> network-info criteria network is-not wifi ssid <value> set profiles hip-objects <name> network-info criteria network is-not mobile set profiles hip-objects <name> network-info criteria network is-not mobile carrier <value> set profiles hip-objects <name> network-info criteria network is-not ethernet set profiles hip-objects <name> network-info criteria network is-not unknown set profiles hip-objects <name> patch-management set profiles hip-objects <name> patch-management criteria set profiles hip-objects <name> patch-management criteria is-installed <yes|no> set profiles hip-objects <name> patch-management criteria is-enabled <no|yes|not-available> set profiles hip-objects <name> patch-management criteria missing-patches set profiles hip-objects <name> patch-management criteria missing-patches severity set profiles hip-objects <name> patch-management criteria missing-patches severity greater-equal <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches severity greater-than <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches severity is <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches severity is-not <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches severity less-equal <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches severity less-than <0-100000> set profiles hip-objects <name> patch-management criteria missing-patches patches [ <patches1> <patches2>... ] set profiles hip-objects <name> patch-management criteria missing-patches check <has-any|has-none|has-all> set profiles hip-objects <name> patch-management vendor set profiles hip-objects <name> patch-management vendor <name> set profiles hip-objects <name> patch-management vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> patch-management exclude-vendor <yes|no> set profiles hip-objects <name> data-loss-prevention set profiles hip-objects <name> data-loss-prevention criteria set profiles hip-objects <name> data-loss-prevention criteria is-installed <yes|no> set profiles hip-objects <name> data-loss-prevention criteria is-enabled <no|yes|not-available> set profiles hip-objects <name> data-loss-prevention vendor set profiles hip-objects <name> data-loss-prevention vendor <name> set profiles hip-objects <name> data-loss-prevention vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> data-loss-prevention exclude-vendor <yes|no> set profiles hip-objects <name> firewall set profiles hip-objects <name> firewall criteria set profiles hip-objects <name> firewall criteria is-installed <yes|no> set profiles hip-objects <name> firewall criteria is-enabled <no|yes|not-available> set profiles hip-objects <name> firewall vendor set profiles hip-objects <name> firewall vendor <name> set profiles hip-objects <name> firewall vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> firewall exclude-vendor <yes|no> set profiles hip-objects <name> anti-malware set profiles hip-objects <name> anti-malware criteria set profiles hip-objects <name> anti-malware criteria virdef-version set profiles hip-objects <name> anti-malware criteria virdef-version within set profiles hip-objects <name> anti-malware criteria virdef-version within days <1-65535> set profiles hip-objects <name> anti-malware criteria virdef-version within versions <1-65535> set profiles hip-objects <name> anti-malware criteria virdef-version not-within set profiles hip-objects <name> anti-malware criteria virdef-version not-within days <1-65535> set profiles hip-objects <name> anti-malware criteria virdef-version not-within versions <1-65535> set profiles hip-objects <name> anti-malware criteria product-version set profiles hip-objects <name> anti-malware criteria product-version greater-equal <value> set profiles hip-objects <name> anti-malware criteria product-version greater-than <value> set profiles hip-objects <name> anti-malware criteria product-version is <value> set profiles hip-objects <name> anti-malware criteria product-version is-not <value> set profiles hip-objects <name> anti-malware criteria product-version less-equal <value> set profiles hip-objects <name> anti-malware criteria product-version less-than <value> set profiles hip-objects <name> anti-malware criteria product-version contains <value> set profiles hip-objects <name> anti-malware criteria product-version within set profiles hip-objects <name> anti-malware criteria product-version within versions <1-1> set profiles hip-objects <name> anti-malware criteria product-version not-within set profiles hip-objects <name> anti-malware criteria product-version not-within versions <1-1> set profiles hip-objects <name> anti-malware criteria is-installed <yes|no> set profiles hip-objects <name> anti-malware criteria real-time-protection <no|yes|not-available> set profiles hip-objects <name> anti-malware criteria last-scan-time set profiles hip-objects <name> anti-malware criteria last-scan-time not-available set profiles hip-objects <name> anti-malware criteria last-scan-time within set profiles hip-objects <name> anti-malware criteria last-scan-time within days <1-65535> set profiles hip-objects <name> anti-malware criteria last-scan-time within hours <1-65535> set profiles hip-objects <name> anti-malware criteria last-scan-time not-within set profiles hip-objects <name> anti-malware criteria last-scan-time not-within days <1-65535> set profiles hip-objects <name> anti-malware criteria last-scan-time not-within hours <1-65535> set profiles hip-objects <name> anti-malware vendor set profiles hip-objects <name> anti-malware vendor <name> set profiles hip-objects <name> anti-malware vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> anti-malware exclude-vendor <yes|no> set profiles hip-objects <name> disk-backup set profiles hip-objects <name> disk-backup criteria set profiles hip-objects <name> disk-backup criteria is-installed <yes|no> set profiles hip-objects <name> disk-backup criteria last-backup-time set profiles hip-objects <name> disk-backup criteria last-backup-time not-available set profiles hip-objects <name> disk-backup criteria last-backup-time within set profiles hip-objects <name> disk-backup criteria last-backup-time within days <1-65535> set profiles hip-objects <name> disk-backup criteria last-backup-time within hours <1-65535> set profiles hip-objects <name> disk-backup criteria last-backup-time not-within set profiles hip-objects <name> disk-backup criteria last-backup-time not-within days <1-65535> set profiles hip-objects <name> disk-backup criteria last-backup-time not-within hours <1-65535> set profiles hip-objects <name> disk-backup vendor set profiles hip-objects <name> disk-backup vendor <name> set profiles hip-objects <name> disk-backup vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> disk-backup exclude-vendor <yes|no> set profiles hip-objects <name> disk-encryption set profiles hip-objects <name> disk-encryption criteria set profiles hip-objects <name> disk-encryption criteria is-installed <yes|no> set profiles hip-objects <name> disk-encryption criteria encrypted-locations set profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> set profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state set profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state is <encrypted|unencrypted|partial|unknown> set profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state is-not <encrypted|unencrypted|partial|unknown> set profiles hip-objects <name> disk-encryption vendor set profiles hip-objects <name> disk-encryption vendor <name> set profiles hip-objects <name> disk-encryption vendor <name> product [ <product1> <product2>... ] set profiles hip-objects <name> disk-encryption exclude-vendor <yes|no> set profiles hip-objects <name> custom-checks set profiles hip-objects <name> custom-checks criteria set profiles hip-objects <name> custom-checks criteria process-list set profiles hip-objects <name> custom-checks criteria process-list <name> set profiles hip-objects <name> custom-checks criteria process-list <name> running <yes|no> set profiles hip-objects <name> custom-checks criteria registry-key set profiles hip-objects <name> custom-checks criteria registry-key <name> set profiles hip-objects <name> custom-checks criteria registry-key <name> default-value-data <value> set profiles hip-objects <name> custom-checks criteria registry-key <name> negate <yes|no> set profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value set profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name> set profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name> value-data <value> set profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name> negate <yes|no> set profiles hip-objects <name> custom-checks criteria plist set profiles hip-objects <name> custom-checks criteria plist <name> set profiles hip-objects <name> custom-checks criteria plist <name> negate <yes|no> set profiles hip-objects <name> custom-checks criteria plist <name> key set profiles hip-objects <name> custom-checks criteria plist <name> key <name> set profiles hip-objects <name> custom-checks criteria plist <name> key <name> value <value> set profiles hip-objects <name> custom-checks criteria plist <name> key <name> negate <yes|no> set profiles hip-objects <name> mobile-device set profiles hip-objects <name> mobile-device criteria set profiles hip-objects <name> mobile-device criteria jailbroken <no|yes> set profiles hip-objects <name> mobile-device criteria disk-encrypted <no|yes> set profiles hip-objects <name> mobile-device criteria passcode-set <no|yes> set profiles hip-objects <name> mobile-device criteria last-checkin-time set profiles hip-objects <name> mobile-device criteria last-checkin-time within set profiles hip-objects <name> mobile-device criteria last-checkin-time within days <1-365> set profiles hip-objects <name> mobile-device criteria last-checkin-time not-within set profiles hip-objects <name> mobile-device criteria last-checkin-time not-within days <1-365> set profiles hip-objects <name> mobile-device criteria imei set profiles hip-objects <name> mobile-device criteria imei contains <value> set profiles hip-objects <name> mobile-device criteria imei is <value> set profiles hip-objects <name> mobile-device criteria imei is-not <value> set profiles hip-objects <name> mobile-device criteria model set profiles hip-objects <name> mobile-device criteria model contains <value> set profiles hip-objects <name> mobile-device criteria model is <value> set profiles hip-objects <name> mobile-device criteria model is-not <value> set profiles hip-objects <name> mobile-device criteria phone-number set profiles hip-objects <name> mobile-device criteria phone-number contains <value> set profiles hip-objects <name> mobile-device criteria phone-number is <value> set profiles hip-objects <name> mobile-device criteria phone-number is-not <value> set profiles hip-objects <name> mobile-device criteria tag set profiles hip-objects <name> mobile-device criteria tag contains <value> set profiles hip-objects <name> mobile-device criteria tag is <value> set profiles hip-objects <name> mobile-device criteria tag is-not <value> set profiles hip-objects <name> mobile-device criteria applications set profiles hip-objects <name> mobile-device criteria applications has-malware set profiles hip-objects <name> mobile-device criteria applications has-malware no set profiles hip-objects <name> mobile-device criteria applications has-malware yes set profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes set profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name> set profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name> package <value> set profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name> hash <value> set profiles hip-objects <name> mobile-device criteria applications has-unmanaged-app <no|yes> set profiles hip-objects <name> mobile-device criteria applications includes set profiles hip-objects <name> mobile-device criteria applications includes <name> set profiles hip-objects <name> mobile-device criteria applications includes <name> package <value> set profiles hip-objects <name> mobile-device criteria applications includes <name> hash <value> set profiles hip-objects <name> certificate set profiles hip-objects <name> certificate criteria set profiles hip-objects <name> certificate criteria certificate-profile <value> set profiles hip-objects <name> certificate criteria certificate-attributes set profiles hip-objects <name> certificate criteria certificate-attributes <name> set profiles hip-objects <name> certificate criteria certificate-attributes <name> value <value> set profiles virus set profiles virus <name> set profiles virus <name> description <value> set profiles virus <name> packet-capture <yes|no> set profiles virus <name> mlav-engine-filebased-enabled set profiles virus <name> mlav-engine-filebased-enabled <name> set profiles virus <name> mlav-engine-filebased-enabled <name> mlav-policy-action <enable|enable(alert-only)|disable> set profiles virus <name> decoder set profiles virus <name> decoder <name> set profiles virus <name> decoder <name> action <default|allow|alert|drop|reset-client|reset-server|reset-both> set profiles virus <name> decoder <name> wildfire-action <default|allow|alert|drop|reset-client|reset-server|reset-both> set profiles virus <name> decoder <name> mlav-action <default|allow|alert|drop|reset-client|reset-server|reset-both> set profiles virus <name> application set profiles virus <name> application <name> set profiles virus <name> application <name> action <default|allow|alert|drop|reset-client|reset-server|reset-both> set profiles virus <name> threat-exception set profiles virus <name> threat-exception <name> set profiles virus <name> mlav-exception set profiles virus <name> mlav-exception <name> set profiles virus <name> mlav-exception <name> filename <value> set profiles virus <name> mlav-exception <name> description <value> set profiles spyware set profiles spyware <name> set profiles spyware <name> description <value> set profiles spyware <name> botnet-domains set profiles spyware <name> botnet-domains lists set profiles spyware <name> botnet-domains lists <name> set profiles spyware <name> botnet-domains lists <name> action set profiles spyware <name> botnet-domains lists <name> action alert set profiles spyware <name> botnet-domains lists <name> action allow set profiles spyware <name> botnet-domains lists <name> action block set profiles spyware <name> botnet-domains lists <name> action sinkhole set profiles spyware <name> botnet-domains lists <name> packet-capture <disable|single-packet|extended-capture> set profiles spyware <name> botnet-domains dns-security-categories set profiles spyware <name> botnet-domains dns-security-categories <name> set profiles spyware <name> botnet-domains dns-security-categories <name> action <default|allow|block|sinkhole> set profiles spyware <name> botnet-domains dns-security-categories <name> log-level <default|none|low|informational|medium|high|critical> set profiles spyware <name> botnet-domains dns-security-categories <name> packet-capture <disable|single-packet|extended-capture> set profiles spyware <name> botnet-domains whitelist set profiles spyware <name> botnet-domains whitelist <name> set profiles spyware <name> botnet-domains whitelist <name> description <value> set profiles spyware <name> botnet-domains sinkhole set profiles spyware <name> botnet-domains sinkhole ipv4-address <value>|<127.0.0.1|pan-sinkhole-default-ip> set profiles spyware <name> botnet-domains sinkhole ipv6-address <ip/netmask>|<::1> set profiles spyware <name> botnet-domains threat-exception set profiles spyware <name> botnet-domains threat-exception <name> set profiles spyware <name> rules set profiles spyware <name> rules <name> set profiles spyware <name> rules <name> threat-name <value>|<any> set profiles spyware <name> rules <name> category <value>|<any> set profiles spyware <name> rules <name> severity [ <severity1> <severity2>... ] set profiles spyware <name> rules <name> action set profiles spyware <name> rules <name> action default set profiles spyware <name> rules <name> action allow set profiles spyware <name> rules <name> action alert set profiles spyware <name> rules <name> action drop set profiles spyware <name> rules <name> action reset-client set profiles spyware <name> rules <name> action reset-server set profiles spyware <name> rules <name> action reset-both set profiles spyware <name> rules <name> action block-ip set profiles spyware <name> rules <name> action block-ip track-by <source|source-and-destination> set profiles spyware <name> rules <name> action block-ip duration <1-3600> set profiles spyware <name> rules <name> packet-capture <disable|single-packet|extended-capture> set profiles spyware <name> threat-exception set profiles spyware <name> threat-exception <name> set profiles spyware <name> threat-exception <name> packet-capture <disable|single-packet|extended-capture> set profiles spyware <name> threat-exception <name> action set profiles spyware <name> threat-exception <name> action default set profiles spyware <name> threat-exception <name> action allow set profiles spyware <name> threat-exception <name> action alert set profiles spyware <name> threat-exception <name> action drop set profiles spyware <name> threat-exception <name> action reset-both set profiles spyware <name> threat-exception <name> action reset-client set profiles spyware <name> threat-exception <name> action reset-server set profiles spyware <name> threat-exception <name> action block-ip set profiles spyware <name> threat-exception <name> action block-ip track-by <source|source-and-destination> set profiles spyware <name> threat-exception <name> action block-ip duration <1-3600> set profiles spyware <name> threat-exception <name> exempt-ip set profiles spyware <name> threat-exception <name> exempt-ip <name> set profiles spyware <name> cloud-inline-analysis <yes|no> set profiles spyware <name> mica-engine-spyware-enabled set profiles spyware <name> mica-engine-spyware-enabled <name> set profiles spyware <name> mica-engine-spyware-enabled <name> inline-policy-action <drop|alert|allow|reset-both|reset-client|reset-server> set profiles spyware <name> inline-exception-edl-url [ <inline-exception-edl-url1> <inline-exception-edl-url2>... ] set profiles spyware <name> inline-exception-ip-address [ <inline-exception-ip-address1> <inline-exception-ip-address2>... ] set profiles vulnerability set profiles vulnerability <name> set profiles vulnerability <name> description <value> set profiles vulnerability <name> rules set profiles vulnerability <name> rules <name> set profiles vulnerability <name> rules <name> threat-name <value>|<any> set profiles vulnerability <name> rules <name> cve [ <cve1> <cve2>... ] set profiles vulnerability <name> rules <name> host <any|client|server> set profiles vulnerability <name> rules <name> vendor-id [ <vendor-id1> <vendor-id2>... ] set profiles vulnerability <name> rules <name> severity [ <severity1> <severity2>... ] set profiles vulnerability <name> rules <name> category <value>|<any> set profiles vulnerability <name> rules <name> action set profiles vulnerability <name> rules <name> action default set profiles vulnerability <name> rules <name> action allow set profiles vulnerability <name> rules <name> action alert set profiles vulnerability <name> rules <name> action drop set profiles vulnerability <name> rules <name> action reset-client set profiles vulnerability <name> rules <name> action reset-server set profiles vulnerability <name> rules <name> action reset-both set profiles vulnerability <name> rules <name> action block-ip set profiles vulnerability <name> rules <name> action block-ip track-by <source|source-and-destination> set profiles vulnerability <name> rules <name> action block-ip duration <1-3600> set profiles vulnerability <name> rules <name> packet-capture <disable|single-packet|extended-capture> set profiles vulnerability <name> threat-exception set profiles vulnerability <name> threat-exception <name> set profiles vulnerability <name> threat-exception <name> packet-capture <disable|single-packet|extended-capture> set profiles vulnerability <name> threat-exception <name> action set profiles vulnerability <name> threat-exception <name> action default set profiles vulnerability <name> threat-exception <name> action allow set profiles vulnerability <name> threat-exception <name> action alert set profiles vulnerability <name> threat-exception <name> action drop set profiles vulnerability <name> threat-exception <name> action reset-client set profiles vulnerability <name> threat-exception <name> action reset-server set profiles vulnerability <name> threat-exception <name> action reset-both set profiles vulnerability <name> threat-exception <name> action block-ip set profiles vulnerability <name> threat-exception <name> action block-ip track-by <source|source-and-destination> set profiles vulnerability <name> threat-exception <name> action block-ip duration <1-3600> set profiles vulnerability <name> threat-exception <name> time-attribute set profiles vulnerability <name> threat-exception <name> time-attribute interval <1-3600> set profiles vulnerability <name> threat-exception <name> time-attribute threshold <1-65535> set profiles vulnerability <name> threat-exception <name> time-attribute track-by <source|destination|source-and-destination> set profiles vulnerability <name> threat-exception <name> exempt-ip set profiles vulnerability <name> threat-exception <name> exempt-ip <name> set profiles url-filtering set profiles url-filtering <name> set profiles url-filtering <name> description <value> set profiles url-filtering <name> allow [ <allow1> <allow2>... ] set profiles url-filtering <name> alert [ <alert1> <alert2>... ] set profiles url-filtering <name> block [ <block1> <block2>... ] set profiles url-filtering <name> continue [ <continue1> <continue2>... ] set profiles url-filtering <name> override [ <override1> <override2>... ] set profiles url-filtering <name> credential-enforcement set profiles url-filtering <name> credential-enforcement mode set profiles url-filtering <name> credential-enforcement mode disabled set profiles url-filtering <name> credential-enforcement mode ip-user set profiles url-filtering <name> credential-enforcement mode domain-credentials set profiles url-filtering <name> credential-enforcement mode group-mapping <value> set profiles url-filtering <name> credential-enforcement log-severity <value> set profiles url-filtering <name> credential-enforcement allow [ <allow1> <allow2>... ] set profiles url-filtering <name> credential-enforcement alert [ <alert1> <alert2>... ] set profiles url-filtering <name> credential-enforcement block [ <block1> <block2>... ] set profiles url-filtering <name> credential-enforcement continue [ <continue1> <continue2>... ] set profiles url-filtering <name> enable-container-page <yes|no> set profiles url-filtering <name> log-container-page-only <yes|no> set profiles url-filtering <name> safe-search-enforcement <yes|no> set profiles url-filtering <name> log-http-hdr-xff <yes|no> set profiles url-filtering <name> log-http-hdr-user-agent <yes|no> set profiles url-filtering <name> log-http-hdr-referer <yes|no> set profiles url-filtering <name> http-header-insertion set profiles url-filtering <name> http-header-insertion <name> set profiles url-filtering <name> http-header-insertion <name> type set profiles url-filtering <name> http-header-insertion <name> type <name> set profiles url-filtering <name> http-header-insertion <name> type <name> headers set profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> set profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> header <value> set profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> value <value> set profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> log <yes|no> set profiles url-filtering <name> http-header-insertion <name> type <name> domains [ <domains1> <domains2>... ] set profiles url-filtering <name> local-inline-cat <yes|no> set profiles url-filtering <name> cloud-inline-cat <yes|no> set profiles url-filtering <name> mlav-category-exception [ <mlav-category-exception1> <mlav-category-exception2>... ] set profiles file-blocking set profiles file-blocking <name> set profiles file-blocking <name> description <value> set profiles file-blocking <name> rules set profiles file-blocking <name> rules <name> set profiles file-blocking <name> rules <name> application [ <application1> <application2>... ] set profiles file-blocking <name> rules <name> file-type [ <file-type1> <file-type2>... ] set profiles file-blocking <name> rules <name> direction <upload|download|both> set profiles file-blocking <name> rules <name> action <alert|block|continue> set profiles wildfire-analysis set profiles wildfire-analysis <name> set profiles wildfire-analysis <name> description <value> set profiles wildfire-analysis <name> rules set profiles wildfire-analysis <name> rules <name> set profiles wildfire-analysis <name> rules <name> application [ <application1> <application2>... ] set profiles wildfire-analysis <name> rules <name> file-type [ <file-type1> <file-type2>... ] set profiles wildfire-analysis <name> rules <name> direction <upload|download|both> set profiles wildfire-analysis <name> rules <name> analysis <public-cloud|private-cloud> set profiles custom-url-category set profiles custom-url-category <name> set profiles custom-url-category <name> description <value> set profiles custom-url-category <name> list [ <list1> <list2>... ] set profiles custom-url-category <name> type <value> set profiles data-objects set profiles data-objects <name> set profiles data-objects <name> description <value> set profiles data-objects <name> pattern-type set profiles data-objects <name> pattern-type predefined set profiles data-objects <name> pattern-type predefined pattern set profiles data-objects <name> pattern-type predefined pattern <name> set profiles data-objects <name> pattern-type predefined pattern <name> file-type [ <file-type1> <file-type2>... ] set profiles data-objects <name> pattern-type regex set profiles data-objects <name> pattern-type regex pattern set profiles data-objects <name> pattern-type regex pattern <name> set profiles data-objects <name> pattern-type regex pattern <name> file-type [ <file-type1> <file-type2>... ] set profiles data-objects <name> pattern-type regex pattern <name> regex <value> set profiles data-objects <name> pattern-type file-properties set profiles data-objects <name> pattern-type file-properties pattern set profiles data-objects <name> pattern-type file-properties pattern <name> set profiles data-objects <name> pattern-type file-properties pattern <name> file-type <value> set profiles data-objects <name> pattern-type file-properties pattern <name> file-property <value> set profiles data-objects <name> pattern-type file-properties pattern <name> property-value <value> set profiles data-filtering set profiles data-filtering <name> set profiles data-filtering <name> description <value> set profiles data-filtering <name> data-capture <yes|no> set profiles data-filtering <name> rules set profiles data-filtering <name> rules <name> set profiles data-filtering <name> rules <name> data-object <value> set profiles data-filtering <name> rules <name> application [ <application1> <application2>... ] set profiles data-filtering <name> rules <name> file-type [ <file-type1> <file-type2>... ] set profiles data-filtering <name> rules <name> direction <upload|download|both> set profiles data-filtering <name> rules <name> alert-threshold <0-65535> set profiles data-filtering <name> rules <name> block-threshold <0-65535> set profiles data-filtering <name> rules <name> log-severity <value> set profiles hip-profiles set profiles hip-profiles <name> set profiles hip-profiles <name> description <value> set profiles hip-profiles <name> match <value> set profiles dos-protection set profiles dos-protection <name> set profiles dos-protection <name> type <aggregate|classified> set profiles dos-protection <name> description <value> set profiles dos-protection <name> flood set profiles dos-protection <name> flood tcp-syn set profiles dos-protection <name> flood tcp-syn enable <yes|no> set profiles dos-protection <name> flood tcp-syn red set profiles dos-protection <name> flood tcp-syn red alarm-rate <0-2000000> set profiles dos-protection <name> flood tcp-syn red activate-rate <1-2000000> set profiles dos-protection <name> flood tcp-syn red maximal-rate <1-2000000> set profiles dos-protection <name> flood tcp-syn red block set profiles dos-protection <name> flood tcp-syn red block duration <1-21600> set profiles dos-protection <name> flood tcp-syn syn-cookies set profiles dos-protection <name> flood tcp-syn syn-cookies alarm-rate <0-2000000> set profiles dos-protection <name> flood tcp-syn syn-cookies activate-rate <0-2000000> set profiles dos-protection <name> flood tcp-syn syn-cookies maximal-rate <1-2000000> set profiles dos-protection <name> flood tcp-syn syn-cookies block set profiles dos-protection <name> flood tcp-syn syn-cookies block duration <1-21600> set profiles dos-protection <name> flood udp set profiles dos-protection <name> flood udp enable <yes|no> set profiles dos-protection <name> flood udp red set profiles dos-protection <name> flood udp red alarm-rate <0-2000000> set profiles dos-protection <name> flood udp red activate-rate <1-2000000> set profiles dos-protection <name> flood udp red maximal-rate <1-2000000> set profiles dos-protection <name> flood udp red block set profiles dos-protection <name> flood udp red block duration <1-21600> set profiles dos-protection <name> flood icmp set profiles dos-protection <name> flood icmp enable <yes|no> set profiles dos-protection <name> flood icmp red set profiles dos-protection <name> flood icmp red alarm-rate <0-2000000> set profiles dos-protection <name> flood icmp red activate-rate <1-2000000> set profiles dos-protection <name> flood icmp red maximal-rate <1-2000000> set profiles dos-protection <name> flood icmp red block set profiles dos-protection <name> flood icmp red block duration <1-21600> set profiles dos-protection <name> flood icmpv6 set profiles dos-protection <name> flood icmpv6 enable <yes|no> set profiles dos-protection <name> flood icmpv6 red set profiles dos-protection <name> flood icmpv6 red alarm-rate <0-2000000> set profiles dos-protection <name> flood icmpv6 red activate-rate <1-2000000> set profiles dos-protection <name> flood icmpv6 red maximal-rate <1-2000000> set profiles dos-protection <name> flood icmpv6 red block set profiles dos-protection <name> flood icmpv6 red block duration <1-21600> set profiles dos-protection <name> flood other-ip set profiles dos-protection <name> flood other-ip enable <yes|no> set profiles dos-protection <name> flood other-ip red set profiles dos-protection <name> flood other-ip red alarm-rate <0-2000000> set profiles dos-protection <name> flood other-ip red activate-rate <1-2000000> set profiles dos-protection <name> flood other-ip red maximal-rate <1-2000000> set profiles dos-protection <name> flood other-ip red block set profiles dos-protection <name> flood other-ip red block duration <1-21600> set profiles dos-protection <name> resource set profiles dos-protection <name> resource sessions set profiles dos-protection <name> resource sessions enabled <yes|no> set profiles dos-protection <name> resource sessions max-concurrent-limit <1-4194304> set profiles sdwan-path-quality set profiles sdwan-path-quality <name> set profiles sdwan-path-quality <name> metric set profiles sdwan-path-quality <name> metric latency set profiles sdwan-path-quality <name> metric latency threshold <10-3000> set profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high> set profiles sdwan-path-quality <name> metric pkt-loss set profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100> set profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high> set profiles sdwan-path-quality <name> metric jitter set profiles sdwan-path-quality <name> metric jitter threshold <10-2000> set profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high> set profiles sdwan-traffic-distribution set profiles sdwan-traffic-distribution <name> set profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution> set profiles sdwan-traffic-distribution <name> link-tags set profiles sdwan-traffic-distribution <name> link-tags <name> set profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100> set profiles sdwan-saas-quality set profiles sdwan-saas-quality <name> set profiles sdwan-saas-quality <name> monitor-mode set profiles sdwan-saas-quality <name> monitor-mode adaptive set profiles sdwan-saas-quality <name> monitor-mode static-ip set profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address set profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address <name> set profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address <name> probe-interval <1-60> set profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn set profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn fqdn-name <value> set profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn probe-interval <1-60> set profiles sdwan-saas-quality <name> monitor-mode http-https set profiles sdwan-saas-quality <name> monitor-mode http-https monitored-url <value> set profiles sdwan-saas-quality <name> monitor-mode http-https probe-interval <3-60> set profiles sdwan-error-correction set profiles sdwan-error-correction <name> set profiles sdwan-error-correction <name> activation-threshold <1-99> set profiles sdwan-error-correction <name> mode set profiles sdwan-error-correction <name> mode forward-error-correction set profiles sdwan-error-correction <name> mode forward-error-correction ratio <10% (20:2)|20% (20:4)|30% (20:6)|40% (20:8)|50% (20:10)> set profiles sdwan-error-correction <name> mode forward-error-correction recovery-duration <1-5000> set profiles sdwan-error-correction <name> mode packet-duplication set profiles sdwan-error-correction <name> mode packet-duplication recovery-duration-pd <1-5000> set profiles decryption set profiles decryption <name> set profiles decryption <name> interface <value> set profiles decryption <name> forwarded-only <yes|no> set profiles decryption <name> ssl-forward-proxy set profiles decryption <name> ssl-forward-proxy block-expired-certificate <yes|no> set profiles decryption <name> ssl-forward-proxy block-untrusted-issuer <yes|no> set profiles decryption <name> ssl-forward-proxy block-tls13-downgrade-no-resource <yes|no> set profiles decryption <name> ssl-forward-proxy restrict-cert-exts <yes|no> set profiles decryption <name> ssl-forward-proxy block-unsupported-version <yes|no> set profiles decryption <name> ssl-forward-proxy block-unsupported-cipher <yes|no> set profiles decryption <name> ssl-forward-proxy block-client-cert <yes|no> set profiles decryption <name> ssl-forward-proxy block-if-no-resource <yes|no> set profiles decryption <name> ssl-forward-proxy block-if-hsm-unavailable <yes|no> set profiles decryption <name> ssl-forward-proxy block-unknown-cert <yes|no> set profiles decryption <name> ssl-forward-proxy block-timeout-cert <yes|no> set profiles decryption <name> ssl-forward-proxy auto-include-altname <yes|no> set profiles decryption <name> ssl-forward-proxy strip-alpn <yes|no> set profiles decryption <name> ssl-inbound-proxy set profiles decryption <name> ssl-inbound-proxy block-unsupported-version <yes|no> set profiles decryption <name> ssl-inbound-proxy block-unsupported-cipher <yes|no> set profiles decryption <name> ssl-inbound-proxy block-if-no-resource <yes|no> set profiles decryption <name> ssl-inbound-proxy block-tls13-downgrade-no-resource <yes|no> set profiles decryption <name> ssl-inbound-proxy block-if-hsm-unavailable <yes|no> set profiles decryption <name> ssl-protocol-settings set profiles decryption <name> ssl-protocol-settings min-version <sslv3|tls1-0|tls1-1|tls1-2|tls1-3> set profiles decryption <name> ssl-protocol-settings max-version <sslv3|tls1-0|tls1-1|tls1-2|tls1-3|max> set profiles decryption <name> ssl-protocol-settings keyxchg-algo-rsa <yes|no> set profiles decryption <name> ssl-protocol-settings keyxchg-algo-dhe <yes|no> set profiles decryption <name> ssl-protocol-settings keyxchg-algo-ecdhe <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-3des <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-rc4 <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-aes-128-cbc <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-aes-256-cbc <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-aes-128-gcm <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-aes-256-gcm <yes|no> set profiles decryption <name> ssl-protocol-settings enc-algo-chacha20-poly1305 <yes|no> set profiles decryption <name> ssl-protocol-settings auth-algo-md5 <yes|no> set profiles decryption <name> ssl-protocol-settings auth-algo-sha1 <yes|no> set profiles decryption <name> ssl-protocol-settings auth-algo-sha256 <yes|no> set profiles decryption <name> ssl-protocol-settings auth-algo-sha384 <yes|no> set profiles decryption <name> ssl-no-proxy set profiles decryption <name> ssl-no-proxy block-expired-certificate <yes|no> set profiles decryption <name> ssl-no-proxy block-untrusted-issuer <yes|no> set profiles decryption <name> ssh-proxy set profiles decryption <name> ssh-proxy block-unsupported-version <yes|no> set profiles decryption <name> ssh-proxy block-unsupported-alg <yes|no> set profiles decryption <name> ssh-proxy block-ssh-errors <yes|no> set profiles decryption <name> ssh-proxy block-if-no-resource <yes|no> set profiles packet-broker set profiles packet-broker <name> set profiles packet-broker <name> description <value> set profiles packet-broker <name> interface-primary <value> set profiles packet-broker <name> interface-secondary <value> set profiles packet-broker <name> flow <unidirectional|bidirectional> set profiles packet-broker <name> transparent set profiles packet-broker <name> transparent enable-ipv6 <yes|no> set profiles packet-broker <name> routed set profiles packet-broker <name> routed security-chain set profiles packet-broker <name> routed security-chain <name> set profiles packet-broker <name> routed security-chain <name> enable <yes|no> set profiles packet-broker <name> routed security-chain <name> first-device <ip/netmask> set profiles packet-broker <name> routed security-chain <name> first-device-description <value> set profiles packet-broker <name> routed security-chain <name> last-device <ip/netmask> set profiles packet-broker <name> routed security-chain <name> last-device-description <value> set profiles packet-broker <name> routed distribution <round-robin|ip-modulo|ip-hash|lowest-latency> set profiles packet-broker <name> health-check set profiles packet-broker <name> health-check failure-action <bypass|block> set profiles packet-broker <name> health-check failure-condition <any|all> set profiles packet-broker <name> health-check path-enable <yes|no> set profiles packet-broker <name> health-check path-count <1-10> set profiles packet-broker <name> health-check path-interval-s <1-60> set profiles packet-broker <name> health-check path-recovery-hold-s <0-65535> set profiles packet-broker <name> health-check http-enable <yes|no> set profiles packet-broker <name> health-check http-count <1-10> set profiles packet-broker <name> health-check http-interval-s <1-60> set profiles packet-broker <name> health-check http-latency-enable <yes|no> set profiles packet-broker <name> health-check http-latency-maximum-ms <10-65535> set profiles packet-broker <name> health-check http-latency-duration-s <1-65535> set profiles packet-broker <name> health-check http-latency-log-exceeded <yes|no>
There are 9 new set profile-group commands.
set profile-group set profile-group<name> set profile-group <name> virus [ <virus1> <virus2>... ] set profile-group <name> spyware [ <spyware1> <spyware2>... ] set profile-group <name> vulnerability [ <vulnerability1> <vulnerability2>... ] set profile-group <name> url-filtering [ <url-filtering1> <url-filtering2>... ] set profile-group <name> file-blocking [ <file-blocking1> <file-blocking2>... ] set profile-group <name> wildfire-analysis [ <wildfire-analysis1> <wildfire-analysis2>... ] set profile-group <name> data-filtering [ <data-filtering1> <data-filtering2>... ]
There are 25 new set service commands.
set service set service<name> set service <name> description <value> set service <name> protocol set service <name> protocol tcp set service <name> protocol tcp port <0-65535,...> set service <name> protocol tcp source-port <0-65535,...> set service <name> protocol tcp override set service <name> protocol tcp override no set service <name> protocol tcp override yes set service <name> protocol tcp override yes timeout <1-604800> set service <name> protocol tcp override yes halfclose-timeout <1-604800> set service <name> protocol tcp override yes timewait-timeout <1-600> set service <name> protocol udp set service <name> protocol udp port <0-65535,...> set service <name> protocol udp source-port <0-65535,...> set service <name> protocol udp override set service <name> protocol udp override no set service <name> protocol udp override yes set service <name> protocol udp override yes timeout <1-604800> set service <name> tag [ <tag1> <tag2>... ]
There are 4 new set service-group commands.
set service-group set service-group<name> set service-group <name> members [ <members1> <members2>... ] set service-group <name> tag [ <tag1> <tag2>... ]
There are 116 new set reports commands.
set reports set reports<name> set reports <name> description <value> set reports <name> disabled <yes|no> set reports <name> query <value> set reports <name> caption <value> set reports <name> frequency <daily> set reports <name> start-time <value> set reports <name> end-time <value> set reports <name> period <last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-7-calendar-days|last-calendar-week|last-30-days|last-30-calendar-days|last-60-days|last-60-calendar-days|last-90-days|last-90-calendar-days|last-calendar-month> set reports <name> topn <1-10000> set reports <name> topm <1-50> set reports <name> type set reports <name> type appstat set reports <name> type appstat aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type appstat group-by <serial|vsys_name|device_name|vsys|name|risk|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subcategory-of-name|category-of-name|risk-of-name|container-of-name|technology-of-name> set reports <name> type appstat values [ <values1> <values2>... ] set reports <name> type appstat labels [ <labels1> <labels2>... ] set reports <name> type appstat sortby <nbytes|nsess|npkts|nthreats> set reports <name> type decryption set reports <name> type decryption aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type decryption group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|tls_version|tls_keyxchg|tls_enc|tls_auth|ec_curve|err_index|root_status|proxy_type|policy_name|cn|issuer_cn|root_cn|sni|error|src_dag|dst_dag|src_edl|dst_edl|container_id|pod_namespace|pod_name|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time> set reports <name> type decryption values [ <values1> <values2>... ] set reports <name> type decryption labels [ <labels1> <labels2>... ] set reports <name> type decryption sortby <repeatcnt|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type desum set reports <name> type desum aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type desum group-by <serial|time_generated|vsys_name|device_name|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|app|src|dst|srcuser|dstuser|vsys|tls_version|tls_keyxchg|tls_enc|tls_auth|sni|error|err_index|src_edl|dst_edl|container_id|pod_namespace|pod_name|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time> set reports <name> type desum values [ <values1> <values2>... ] set reports <name> type desum labels [ <labels1> <labels2>... ] set reports <name> type desum sortby <repeatcnt|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type threat set reports <name> type threat aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|cloud_reportid|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|monitortag|users|category-of-threatid|threat-type> set reports <name> type threat values [ <values1> <values2>... ] set reports <name> type threat labels [ <labels1> <labels2>... ] set reports <name> type threat sortby <repeatcnt|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type url set reports <name> type url aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|device_name|vsys_name|url|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|cloud_reportid> set reports <name> type url values [ <values1> <values2>... ] set reports <name> type url labels [ <labels1> <labels2>... ] set reports <name> type url sortby <repeatcnt|nunique-of-users> set reports <name> type wildfire set reports <name> type wildfire aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type wildfire group-by <app|category|category-of-app|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|filetype|filename|filedigest|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|xff_ip|src_dag|dst_dag|src_edl|dst_edl> set reports <name> type wildfire values [ <values1> <values2>... ] set reports <name> type wildfire labels [ <labels1> <labels2>... ] set reports <name> type wildfire sortby <repeatcnt|nunique-of-users> set reports <name> type data set reports <name> type data aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type data group-by <action|app|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|threatid|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|data-type|filename|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|xff_ip|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac> set reports <name> type data values [ <values1> <values2>... ] set reports <name> type data labels [ <labels1> <labels2>... ] set reports <name> type data sortby <repeatcnt|nunique-of-users> set reports <name> type thsum set reports <name> type thsum aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type thsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|rule|threatid|srcuser|dstuser|srcloc|dstloc|xff_ip|vsys|from|to|dev_serial|dport|action|severity|inbound_if|outbound_if|category|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|tunnel|direction|assoc_id|ppid|http2_connection|rule_uuid|threat_name|src_edl|dst_edl|hostid|dynusergroup_name|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subtype|tunnelid|monitortag|category-of-threatid|threat-type> set reports <name> type thsum values [ <values1> <values2>... ] set reports <name> type thsum labels [ <labels1> <labels2>... ] set reports <name> type thsum sortby <sessions|count|nunique-of-apps|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type traffic set reports <name> type traffic aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|category|session_end_reason|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|monitortag> set reports <name> type traffic values [ <values1> <values2>... ] set reports <name> type traffic labels [ <labels1> <labels2>... ] set reports <name> type traffic sortby <repeatcnt|bytes|bytes_sent|bytes_received|packets|pkts_sent|pkts_received|chunks|chunks_sent|chunks_received|nunique-of-users|elapsed|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type urlsum set reports <name> type urlsum aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type urlsum group-by <serial|time_generated|vsys_name|device_name|app|category|src|dst|rule|srcuser|dstuser|srcloc|dstloc|vsys|from|to|dev_serial|inbound_if|outbound_if|dport|action|tunnel|url_domain|user_agent|http_method|http2_connection|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|rule_uuid|xff_ip|src_edl|dst_edl|hostid|dynusergroup_name|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|url_category_list|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|monitortag> set reports <name> type urlsum values [ <values1> <values2>... ] set reports <name> type urlsum labels [ <labels1> <labels2>... ] set reports <name> type urlsum sortby <repeatcnt|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type trsum set reports <name> type trsum aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|monitortag|standard-ports-of-app> set reports <name> type trsum values [ <values1> <values2>... ] set reports <name> type trsum labels [ <labels1> <labels2>... ] set reports <name> type trsum sortby <bytes|sessions|bytes_sent|bytes_received|nthreats|nftrans|ndpmatches|nurlcount|chunks|chunks_sent|chunks_received|ncontent|nunique-of-apps|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile> set reports <name> type tunnel set reports <name> type tunnel aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type tunnel group-by <action|app|category-of-app|dport|dst|dstuser|from|inbound_if|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sessionid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|session_end_reason|action_source|tunnel|tunnel_insp_rule|src_dag|dst_dag|src_edl|dst_edl> set reports <name> type tunnel values [ <values1> <values2>... ] set reports <name> type tunnel labels [ <labels1> <labels2>... ] set reports <name> type tunnel sortby <repeatcnt|bytes|bytes_sent|bytes_received|packets|pkts_sent|pkts_received|max_encap|unknown_proto|strict_check|tunnel_fragment|sessions_created|sessions_closed|nunique-of-users> set reports <name> type tunnelsum set reports <name> type tunnelsum aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type tunnelsum group-by <action|app|category-of-app|dst|risk-of-app|rule|rule_uuid|src|subcategory-of-app|technology-of-app|container-of-app|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|tunnel|tunnel_insp_rule|src_dag|dst_dag|src_edl|dst_edl> set reports <name> type tunnelsum values [ <values1> <values2>... ] set reports <name> type tunnelsum labels [ <labels1> <labels2>... ] set reports <name> type tunnelsum sortby <repeatcnt|bytes|bytes_sent|bytes_received> set reports <name> type userid set reports <name> type userid aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type userid group-by <serial|time_generated|vsys_name|device_name|vsys|ip|user|datasourcename|beginport|endport|datasource|datasourcetype|factortype|factorcompletiontime|factorno|tag_name|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subtype> set reports <name> type userid values [ <values1> <values2>... ] set reports <name> type userid labels [ <labels1> <labels2>... ] set reports <name> type userid sortby <repeatcnt|factortype|factorcompletiontime> set reports <name> type auth set reports <name> type auth aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type auth group-by <serial|time_generated|vsys_name|device_name|vsys|ip|user|normalize_user|object|authpolicy|authid|vendor|clienttype|event|factorno|authproto|rule_uuid|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|serverprofile|desc> set reports <name> type auth values [ <values1> <values2>... ] set reports <name> type auth labels [ <labels1> <labels2>... ] set reports <name> type auth sortby <repeatcnt|time_generated|vendor> set reports <name> type iptag set reports <name> type iptag aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type iptag group-by <serial|time_generated|vsys_name|device_name|vsys|ip|tag_name|event_id|datasourcename|datasource_type|datasource_subtype|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time> set reports <name> type iptag values [ <values1> <values2>... ] set reports <name> type iptag labels [ <labels1> <labels2>... ] set reports <name> type iptag sortby <repeatcnt|time_generated> set reports <name> type hipmatch set reports <name> type hipmatch aggregate-by [ <aggregate-by1> <aggregate-by2>... ] set reports <name> type hipmatch group-by <serial|time_generated|vsys_name|device_name|srcuser|vsys|machinename|src|matchname|os|matchtype|srcipv6|hostid|mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time> set reports <name> type hipmatch values [ <values1> <values2>... ] set reports <name> type hipmatch labels [ <labels1> <labels2>... ] set reports <name> type hipmatch sortby <repeatcnt> set reports <name> type hipmatch last-match-by <>
There are 25 new set report-group commands.
set report-group set report-group<name> set report-group <name> title-page <yes|no> set report-group <name> predefined <user-activity-report|saas-application-usage-report> set report-group <name> custom-widget set report-group <name> custom-widget <name> set report-group <name> custom-widget <name> custom-report <value> set report-group <name> custom-widget <name> pdf-summary-report <value> set report-group <name> custom-widget <name> log-view <value> set report-group <name> custom-widget <name> csv <value> set report-group <name> all set report-group <name> all entry set report-group <name> all entry include-user-groups-info <yes|no> set report-group <name> all entry user-groups [ <user-groups1> <user-groups2>... ] set report-group <name> selected-zone set report-group <name> selected-zone entry set report-group <name> selected-zone entry include-user-groups-info <yes|no> set report-group <name> selected-zone entry user-groups [ <user-groups1> <user-groups2>... ] set report-group <name> selected-zone entry zone <value> set report-group <name> selected-user-group set report-group <name> selected-user-group entry set report-group <name> selected-user-group entry user-group <value> set report-group <name> variable set report-group <name> variable <name> set report-group <name> variable <name> value <value>
There are 11 new set pdf-summary-report commands.
set pdf-summary-report set pdf-summary-report<name> set pdf-summary-report <name> header set pdf-summary-report <name> header caption <value> set pdf-summary-report <name> footer set pdf-summary-report <name> footer note <value> set pdf-summary-report <name> custom-widget set pdf-summary-report <name> custom-widget <name> set pdf-summary-report <name> custom-widget <name> chart-type <pie|line|bar|table> set pdf-summary-report <name> custom-widget <name> row <1-6> set pdf-summary-report <name> custom-widget <name> column <1-3>
There are 10 new set email-scheduler commands.
set email-scheduler set email-scheduler<name> set email-scheduler <name> report-group <value> set email-scheduler <name> email-profile <value> set email-scheduler <name> recipient-emails <value> set email-scheduler <name> recurring set email-scheduler <name> recurring disabled set email-scheduler <name> recurring daily set email-scheduler <name> recurring weekly <sunday|monday|tuesday|wednesday|thursday|friday|saturday> set email-scheduler <name> recurring monthly <1-31>
There are 69 new set external-list commands.
set external-list set external-list<name> set external-list <name> type set external-list <name> type predefined-ip set external-list <name> type predefined-ip exception-list [ <exception-list1> <exception-list2>... ] set external-list <name> type predefined-ip description <value> set external-list <name> type predefined-ip url <value> set external-list <name> type predefined-url set external-list <name> type predefined-url exception-list [ <exception-list1> <exception-list2>... ] set external-list <name> type predefined-url description <value> set external-list <name> type predefined-url url <value> set external-list <name> type ip set external-list <name> type ip exception-list [ <exception-list1> <exception-list2>... ] set external-list <name> type ip description <value> set external-list <name> type ip url <value> set external-list <name> type ip certificate-profile <value>|<None> set external-list <name> type ip auth set external-list <name> type ip auth username <value> set external-list <name> type ip auth password <value> set external-list <name> type ip recurring set external-list <name> type ip recurring five-minute set external-list <name> type ip recurring hourly set external-list <name> type ip recurring daily set external-list <name> type ip recurring daily at <value> set external-list <name> type ip recurring weekly set external-list <name> type ip recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday> set external-list <name> type ip recurring weekly at <value> set external-list <name> type ip recurring monthly set external-list <name> type ip recurring monthly day-of-month <1-31> set external-list <name> type ip recurring monthly at <value> set external-list <name> type domain set external-list <name> type domain exception-list [ <exception-list1> <exception-list2>... ] set external-list <name> type domain description <value> set external-list <name> type domain url <value> set external-list <name> type domain certificate-profile <value>|<None> set external-list <name> type domain auth set external-list <name> type domain auth username <value> set external-list <name> type domain auth password <value> set external-list <name> type domain recurring set external-list <name> type domain recurring hourly set external-list <name> type domain recurring five-minute set external-list <name> type domain recurring daily set external-list <name> type domain recurring daily at <value> set external-list <name> type domain recurring weekly set external-list <name> type domain recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday> set external-list <name> type domain recurring weekly at <value> set external-list <name> type domain recurring monthly set external-list <name> type domain recurring monthly day-of-month <1-31> set external-list <name> type domain recurring monthly at <value> set external-list <name> type domain expand-domain <yes|no> set external-list <name> type url set external-list <name> type url exception-list [ <exception-list1> <exception-list2>... ] set external-list <name> type url description <value> set external-list <name> type url url <value> set external-list <name> type url certificate-profile <value>|<None> set external-list <name> type url auth set external-list <name> type url auth username <value> set external-list <name> type url auth password <value> set external-list <name> type url recurring set external-list <name> type url recurring hourly set external-list <name> type url recurring five-minute set external-list <name> type url recurring daily set external-list <name> type url recurring daily at <value> set external-list <name> type url recurring weekly set external-list <name> type url recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday> set external-list <name> type url recurring weekly at <value> set external-list <name> type url recurring monthly set external-list <name> type url recurring monthly day-of-month <1-31> set external-list <name> type url recurring monthly at <value>
There are 15 new set address commands.
set address set address<name> set address <name> description <value> set address <name> ip-netmask <ip/netmask> set address <name> ip-range <ip-range> set address <name> ip-wildcard <ipdiscontmask> set address <name> fqdn <value> set address <name> tag [ <tag1> <tag2>... ]
There are 7 new set address-group commands.
set address-group set address-group<name> set address-group <name> description <value> set address-group <name> static [ <static1> <static2>... ] set address-group <name> dynamic set address-group <name> dynamic filter <value> set address-group <name> tag [ <tag1> <tag2>... ]
There are 5 new set dynamic-user-group commands.
set dynamic-user-group set dynamic-user-group<name> set dynamic-user-group <name> description <value> set dynamic-user-group <name> filter <value> set dynamic-user-group <name> tag [ <tag1> <tag2>... ]
There are 14 new set schedule commands.
set schedule set schedule<name> set schedule <name> schedule-type set schedule <name> schedule-type recurring set schedule <name> schedule-type recurring weekly set schedule <name> schedule-type recurring weekly sunday [ <sunday1> <sunday2>... ] set schedule <name> schedule-type recurring weekly monday [ <monday1> <monday2>... ] set schedule <name> schedule-type recurring weekly tuesday [ <tuesday1> <tuesday2>... ] set schedule <name> schedule-type recurring weekly wednesday [ <wednesday1> <wednesday2>... ] set schedule <name> schedule-type recurring weekly thursday [ <thursday1> <thursday2>... ] set schedule <name> schedule-type recurring weekly friday [ <friday1> <friday2>... ] set schedule <name> schedule-type recurring weekly saturday [ <saturday1> <saturday2>... ] set schedule <name> schedule-type recurring daily [ <daily1> <daily2>... ] set schedule <name> schedule-type non-recurring [ <non-recurring1> <non-recurring2>... ]
There are 138 new set threats commands.
set threats set threats vulnerability set threats vulnerability<name> set threats vulnerability <name> threatname <value> set threats vulnerability <name> affected-host set threats vulnerability <name> affected-host client <yes|no> set threats vulnerability <name> affected-host server <yes|no> set threats vulnerability <name> comment <value> set threats vulnerability <name> severity <value> set threats vulnerability <name> direction <value> set threats vulnerability <name> default-action set threats vulnerability <name> default-action alert set threats vulnerability <name> default-action drop set threats vulnerability <name> default-action reset-client set threats vulnerability <name> default-action reset-server set threats vulnerability <name> default-action reset-both set threats vulnerability <name> default-action block-ip set threats vulnerability <name> default-action block-ip track-by <source|source-and-destination> set threats vulnerability <name> default-action block-ip duration <1-3600> set threats vulnerability <name> default-action allow set threats vulnerability <name> cve [ <cve1> <cve2>... ] set threats vulnerability <name> bugtraq [ <bugtraq1> <bugtraq2>... ] set threats vulnerability <name> vendor [ <vendor1> <vendor2>... ] set threats vulnerability <name> reference [ <reference1> <reference2>... ] set threats vulnerability <name> signature set threats vulnerability <name> signature standard set threats vulnerability <name> signature standard <name> set threats vulnerability <name> signature standard <name> comment <value> set threats vulnerability <name> signature standard <name> scope <protocol-data-unit|session> set threats vulnerability <name> signature standard <name> order-free <yes|no> set threats vulnerability <name> signature standard <name> and-condition set threats vulnerability <name> signature standard <name> and-condition <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than context <value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to context <value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to value <0-4294967295> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> value <1-127>|<value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than context <value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match context <value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match pattern <value> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match negate <yes|no> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> set threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value> set threats vulnerability <name> signature combination set threats vulnerability <name> signature combination time-attribute set threats vulnerability <name> signature combination time-attribute interval <1-3600> set threats vulnerability <name> signature combination time-attribute threshold <1-255> set threats vulnerability <name> signature combination time-attribute track-by <source|destination|source-and-destination> set threats vulnerability <name> signature combination order-free <yes|no> set threats vulnerability <name> signature combination and-condition set threats vulnerability <name> signature combination and-condition <name> set threats vulnerability <name> signature combination and-condition <name> or-condition set threats vulnerability <name> signature combination and-condition <name> or-condition <name> set threats vulnerability <name> signature combination and-condition <name> or-condition <name> threat-id <value> set threats spyware set threats spyware <name> set threats spyware <name> threatname <value> set threats spyware <name> comment <value> set threats spyware <name> severity <value> set threats spyware <name> direction <value> set threats spyware <name> default-action set threats spyware <name> default-action alert set threats spyware <name> default-action drop set threats spyware <name> default-action reset-client set threats spyware <name> default-action reset-server set threats spyware <name> default-action reset-both set threats spyware <name> default-action block-ip set threats spyware <name> default-action block-ip track-by <source|source-and-destination> set threats spyware <name> default-action block-ip duration <1-3600> set threats spyware <name> default-action allow set threats spyware <name> cve [ <cve1> <cve2>... ] set threats spyware <name> bugtraq [ <bugtraq1> <bugtraq2>... ] set threats spyware <name> vendor [ <vendor1> <vendor2>... ] set threats spyware <name> reference [ <reference1> <reference2>... ] set threats spyware <name> signature set threats spyware <name> signature standard set threats spyware <name> signature standard <name> set threats spyware <name> signature standard <name> comment <value> set threats spyware <name> signature standard <name> scope <protocol-data-unit|session> set threats spyware <name> signature standard <name> order-free <yes|no> set threats spyware <name> signature standard <name> and-condition set threats spyware <name> signature standard <name> and-condition <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than context <value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to value <0-4294967295> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to context <value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> value <1-127>|<value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than context <value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match context <value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match pattern <value> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match negate <yes|no> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> set threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value> set threats spyware <name> signature combination set threats spyware <name> signature combination time-attribute set threats spyware <name> signature combination time-attribute interval <1-3600> set threats spyware <name> signature combination time-attribute threshold <1-255> set threats spyware <name> signature combination time-attribute track-by <source|destination|source-and-destination> set threats spyware <name> signature combination order-free <yes|no> set threats spyware <name> signature combination and-condition set threats spyware <name> signature combination and-condition <name> set threats spyware <name> signature combination and-condition <name> or-condition set threats spyware <name> signature combination and-condition <name> or-condition <name> set threats spyware <name> signature combination and-condition <name> or-condition <name> threat-id <value>
There are 97 new set application commands.
set application set application<name> set application <name> default set application <name> default port [ <port1> <port2>... ] set application <name> default ident-by-ip-protocol <0-255,...> set application <name> default ident-by-icmp-type set application <name> default ident-by-icmp-type type <0-255,...> set application <name> default ident-by-icmp-type code <0-255,...> set application <name> default ident-by-icmp6-type set application <name> default ident-by-icmp6-type type <0-255,...> set application <name> default ident-by-icmp6-type code <0-255,...> set application <name> category <value> set application <name> subcategory <value> set application <name> technology <value> set application <name> description <value> set application <name> timeout <0-604800> set application <name> tcp-timeout <0-604800> set application <name> udp-timeout <0-604800> set application <name> tcp-half-closed-timeout <1-604800> set application <name> tcp-time-wait-timeout <1-600> set application <name> risk <1-5> set application <name> evasive-behavior <yes|no> set application <name> consume-big-bandwidth <yes|no> set application <name> used-by-malware <yes|no> set application <name> able-to-transfer-file <yes|no> set application <name> has-known-vulnerability <yes|no> set application <name> tunnel-other-application <yes|no> set application <name> tunnel-applications <yes|no> set application <name> prone-to-misuse <yes|no> set application <name> pervasive-use <yes|no> set application <name> file-type-ident <yes|no> set application <name> virus-ident <yes|no> set application <name> data-ident <yes|no> set application <name> no-appid-caching <yes|no> set application <name> alg-disable-capability <value> set application <name> parent-app <value> set application <name> signature set application <name> signature <name> set application <name> signature <name> comment <value> set application <name> signature <name> scope <protocol-data-unit|session> set application <name> signature <name> order-free <yes|no> set application <name> signature <name> and-condition set application <name> signature <name> and-condition <name> set application <name> signature <name> and-condition <name> or-condition set application <name> signature <name> and-condition <name> or-condition <name> set application <name> signature <name> and-condition <name> or-condition <name> operator set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match context <value> set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match pattern <value> set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> set application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value> set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than context <value> set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295> set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> set application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value> set application <name> signature <name> and-condition <name> or-condition <name> operator less-than set application <name> signature <name> and-condition <name> or-condition <name> operator less-than context <value> set application <name> signature <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295> set application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier set application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier <name> set application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value> set application <name> signature <name> and-condition <name> or-condition <name> operator equal-to set application <name> signature <name> and-condition <name> or-condition <name> operator equal-to context <value>|<unknown-req-tcp|unknown-rsp-tcp|unknown-req-udp|unknown-rsp-udp> set application <name> signature <name> and-condition <name> or-condition <name> operator equal-to position <value> set application <name> signature <name> and-condition <name> or-condition <name> operator equal-to mask <value> set application <name> signature <name> and-condition <name> or-condition <name> operator equal-to value <value>
There are 3 new set application-tag commands.
set application-tag set application-tag<name> set application-tag <name> tag [ <tag1> <tag2>... ]
There are 22 new set application-filter commands.
set application-filter set application-filter<name> set application-filter <name> category [ <category1> <category2>... ] set application-filter <name> subcategory [ <subcategory1> <subcategory2>... ] set application-filter <name> technology [ <technology1> <technology2>... ] set application-filter <name> evasive <yes> set application-filter <name> excessive-bandwidth-use <yes> set application-filter <name> used-by-malware <yes> set application-filter <name> transfers-files <yes> set application-filter <name> has-known-vulnerabilities <yes> set application-filter <name> tunnels-other-apps <yes> set application-filter <name> prone-to-misuse <yes> set application-filter <name> pervasive <yes> set application-filter <name> is-saas <yes> set application-filter <name> new-appid <yes> set application-filter <name> risk [ <risk1> <risk2>... ] set application-filter <name> saas-certifications [ <saas-certifications1> <saas-certifications2>... ] set application-filter <name> saas-risk [ <saas-risk1> <saas-risk2>... ] set application-filter <name> tagging set application-filter <name> tagging no-tag <yes> set application-filter <name> tagging tag [ <tag1> <tag2>... ] set application-filter <name> exclude [ <exclude1> <exclude2>... ]
There are 3 new set application-group commands.
set application-group set application-group<name> set application-group <name> members [ <members1> <members2>... ]
There are 9 new set device-object commands.
set device-object set device-object<name> set device-object <name> description <value> set device-object <name> category [ <category1> <category2>... ] set device-object <name> profile [ <profile1> <profile2>... ] set device-object <name> osfamily [ <osfamily1> <osfamily2>... ] set device-object <name> os [ <os1> <os2>... ] set device-object <name> model [ <model1> <model2>... ] set device-object <name> vendor [ <vendor1> <vendor2>... ]
There are 6 new set region commands.
set region set region<name> set region <name> geo-location set region <name> geo-location latitude <float> set region <name> geo-location longitude <float> set region <name> address [ <address1> <address2>... ]
There are 17 new set tag commands.
set tag set tag<name> set tag <name> color <color1|color2|color3|color4|color5|color6|color7|color8|color9|color10|color11|color12|color13|color14|color15|color16|color17|color19|color20|color21|color22|color23|color24|color25|color26|color27|color28|color29|color30|color31|color32|color33|color34|color35|color36|color37|color38|color39|color40|color41|color42> set tag <name> comments <value>
There are 5 new set authentication-object commands.
set authentication-object set authentication-object<name> set authentication-object <name> authentication-method <web-form|no-captive-portal|browser-challenge> set authentication-object <name> authentication-profile <value> set authentication-object <name> message <value>
There are 361 new set rulebase commands.
set rulebase set rulebase security set rulebase security rules set rulebase security rules<name> set rulebase security rules <name> from [ <from1> <from2>... ] set rulebase security rules <name> to [ <to1> <to2>... ] set rulebase security rules <name> source [ <source1> <source2>... ] set rulebase security rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase security rules <name> destination [ <destination1> <destination2>... ] set rulebase security rules <name> service [ <service1> <service2>... ] set rulebase security rules <name> category [ <category1> <category2>... ] set rulebase security rules <name> application [ <application1> <application2>... ] set rulebase security rules <name> source-hip [ <source-hip1> <source-hip2>... ] set rulebase security rules <name> destination-hip [ <destination-hip1> <destination-hip2>... ] set rulebase security rules <name> schedule <value> set rulebase security rules <name> tag [ <tag1> <tag2>... ] set rulebase security rules <name> negate-source <yes|no> set rulebase security rules <name> negate-destination <yes|no> set rulebase security rules <name> disabled <yes|no> set rulebase security rules <name> description <value> set rulebase security rules <name> group-tag <value> set rulebase security rules <name> action <deny|allow|drop|reset-client|reset-server|reset-both> set rulebase security rules <name> icmp-unreachable <yes|no> set rulebase security rules <name> disable-inspect <yes|no> set rulebase security rules <name> rule-type <universal|intrazone|interzone> set rulebase security rules <name> option set rulebase security rules <name> option disable-server-response-inspection <yes|no> set rulebase security rules <name> log-setting <value> set rulebase security rules <name> log-start <yes|no> set rulebase security rules <name> log-end <yes|no> set rulebase security rules <name> profile-setting set rulebase security rules <name> profile-setting profiles set rulebase security rules <name> profile-setting profiles url-filtering [ <url-filtering1> <url-filtering2>... ] set rulebase security rules <name> profile-setting profiles data-filtering [ <data-filtering1> <data-filtering2>... ] set rulebase security rules <name> profile-setting profiles file-blocking [ <file-blocking1> <file-blocking2>... ] set rulebase security rules <name> profile-setting profiles wildfire-analysis [ <wildfire-analysis1> <wildfire-analysis2>... ] set rulebase security rules <name> profile-setting profiles virus [ <virus1> <virus2>... ] set rulebase security rules <name> profile-setting profiles spyware [ <spyware1> <spyware2>... ] set rulebase security rules <name> profile-setting profiles vulnerability [ <vulnerability1> <vulnerability2>... ] set rulebase security rules <name> profile-setting group [ <group1> <group2>... ] set rulebase security rules <name> qos set rulebase security rules <name> qos marking set rulebase security rules <name> qos marking ip-dscp <value>|<ef|af11|af12|af13|af21|af22|af23|af31|af32|af33|af41|af42|af43|cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7> set rulebase security rules <name> qos marking ip-precedence <value>|<cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7> set rulebase security rules <name> qos marking follow-c2s-flow set rulebase default-security-rules set rulebase default-security-rules rules set rulebase default-security-rules rules <name> set rulebase default-security-rules rules <name> tag [ <tag1> <tag2>... ] set rulebase default-security-rules rules <name> log-setting <value> set rulebase default-security-rules rules <name> log-start <yes|no> set rulebase default-security-rules rules <name> log-end <yes|no> set rulebase default-security-rules rules <name> profile-setting set rulebase default-security-rules rules <name> profile-setting profiles set rulebase default-security-rules rules <name> profile-setting profiles url-filtering [ <url-filtering1> <url-filtering2>... ] set rulebase default-security-rules rules <name> profile-setting profiles data-filtering [ <data-filtering1> <data-filtering2>... ] set rulebase default-security-rules rules <name> profile-setting profiles file-blocking [ <file-blocking1> <file-blocking2>... ] set rulebase default-security-rules rules <name> profile-setting profiles wildfire-analysis [ <wildfire-analysis1> <wildfire-analysis2>... ] set rulebase default-security-rules rules <name> profile-setting profiles virus [ <virus1> <virus2>... ] set rulebase default-security-rules rules <name> profile-setting profiles spyware [ <spyware1> <spyware2>... ] set rulebase default-security-rules rules <name> profile-setting profiles vulnerability [ <vulnerability1> <vulnerability2>... ] set rulebase default-security-rules rules <name> profile-setting group [ <group1> <group2>... ] set rulebase default-security-rules rules <name> group-tag <value> set rulebase default-security-rules rules <name> action <deny|allow|drop|reset-client|reset-server|reset-both> set rulebase default-security-rules rules <name> icmp-unreachable <yes|no> set rulebase application-override set rulebase application-override rules set rulebase application-override rules <name> set rulebase application-override rules <name> from [ <from1> <from2>... ] set rulebase application-override rules <name> to [ <to1> <to2>... ] set rulebase application-override rules <name> source [ <source1> <source2>... ] set rulebase application-override rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase application-override rules <name> destination [ <destination1> <destination2>... ] set rulebase application-override rules <name> tag [ <tag1> <tag2>... ] set rulebase application-override rules <name> negate-source <yes|no> set rulebase application-override rules <name> negate-destination <yes|no> set rulebase application-override rules <name> disabled <yes|no> set rulebase application-override rules <name> description <value> set rulebase application-override rules <name> group-tag <value> set rulebase application-override rules <name> protocol <tcp|udp> set rulebase application-override rules <name> port <0-65535,...> set rulebase application-override rules <name> application <value> set rulebase decryption set rulebase decryption rules set rulebase decryption rules <name> set rulebase decryption rules <name> from [ <from1> <from2>... ] set rulebase decryption rules <name> to [ <to1> <to2>... ] set rulebase decryption rules <name> source [ <source1> <source2>... ] set rulebase decryption rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase decryption rules <name> destination [ <destination1> <destination2>... ] set rulebase decryption rules <name> tag [ <tag1> <tag2>... ] set rulebase decryption rules <name> negate-source <yes|no> set rulebase decryption rules <name> negate-destination <yes|no> set rulebase decryption rules <name> disabled <yes|no> set rulebase decryption rules <name> description <value> set rulebase decryption rules <name> group-tag <value> set rulebase decryption rules <name> source-hip [ <source-hip1> <source-hip2>... ] set rulebase decryption rules <name> destination-hip [ <destination-hip1> <destination-hip2>... ] set rulebase decryption rules <name> service [ <service1> <service2>... ] set rulebase decryption rules <name> category [ <category1> <category2>... ] set rulebase decryption rules <name> action <no-decrypt|decrypt> set rulebase decryption rules <name> type set rulebase decryption rules <name> type ssl-forward-proxy set rulebase decryption rules <name> type ssh-proxy set rulebase decryption rules <name> type ssl-inbound-inspection set rulebase decryption rules <name> type ssl-inbound-inspection certificates [ <certificates1> <certificates2>... ] set rulebase decryption rules <name> profile <value> set rulebase decryption rules <name> log-success <yes|no> set rulebase decryption rules <name> log-fail <yes|no> set rulebase decryption rules <name> log-setting <value> set rulebase authentication set rulebase authentication rules set rulebase authentication rules <name> set rulebase authentication rules <name> from [ <from1> <from2>... ] set rulebase authentication rules <name> to [ <to1> <to2>... ] set rulebase authentication rules <name> source [ <source1> <source2>... ] set rulebase authentication rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase authentication rules <name> destination [ <destination1> <destination2>... ] set rulebase authentication rules <name> source-hip [ <source-hip1> <source-hip2>... ] set rulebase authentication rules <name> destination-hip [ <destination-hip1> <destination-hip2>... ] set rulebase authentication rules <name> tag [ <tag1> <tag2>... ] set rulebase authentication rules <name> negate-source <yes|no> set rulebase authentication rules <name> negate-destination <yes|no> set rulebase authentication rules <name> disabled <yes|no> set rulebase authentication rules <name> description <value> set rulebase authentication rules <name> group-tag <value> set rulebase authentication rules <name> service [ <service1> <service2>... ] set rulebase authentication rules <name> category [ <category1> <category2>... ] set rulebase authentication rules <name> authentication-enforcement <value> set rulebase authentication rules <name> log-setting <value> set rulebase authentication rules <name> timeout <1-1440> set rulebase authentication rules <name> log-authentication-timeout <yes|no> set rulebase tunnel-inspect set rulebase tunnel-inspect rules set rulebase tunnel-inspect rules <name> set rulebase tunnel-inspect rules <name> from [ <from1> <from2>... ] set rulebase tunnel-inspect rules <name> to [ <to1> <to2>... ] set rulebase tunnel-inspect rules <name> source [ <source1> <source2>... ] set rulebase tunnel-inspect rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase tunnel-inspect rules <name> destination [ <destination1> <destination2>... ] set rulebase tunnel-inspect rules <name> tag [ <tag1> <tag2>... ] set rulebase tunnel-inspect rules <name> negate-source <yes|no> set rulebase tunnel-inspect rules <name> negate-destination <yes|no> set rulebase tunnel-inspect rules <name> disabled <yes|no> set rulebase tunnel-inspect rules <name> description <value> set rulebase tunnel-inspect rules <name> group-tag <value> set rulebase tunnel-inspect rules <name> application [ <application1> <application2>... ] set rulebase tunnel-inspect rules <name> tunnel-id set rulebase tunnel-inspect rules <name> tunnel-id vni set rulebase tunnel-inspect rules <name> tunnel-id vni <name> set rulebase tunnel-inspect rules <name> tunnel-id vni <name> id <0-16777215,...> set rulebase tunnel-inspect rules <name> inspect-options set rulebase tunnel-inspect rules <name> inspect-options max-level-inspection <1|2> set rulebase tunnel-inspect rules <name> inspect-options drop-over-max <yes|no> set rulebase tunnel-inspect rules <name> inspect-options drop-unknown-protocol <yes|no> set rulebase tunnel-inspect rules <name> inspect-options drop-strict-checking <yes|no> set rulebase tunnel-inspect rules <name> inspect-options return-vxlan-to-source <yes|no> set rulebase tunnel-inspect rules <name> zone-assign set rulebase tunnel-inspect rules <name> zone-assign source [ <source1> <source2>... ] set rulebase tunnel-inspect rules <name> zone-assign destination [ <destination1> <destination2>... ] set rulebase tunnel-inspect rules <name> monitor-options set rulebase tunnel-inspect rules <name> monitor-options monitor-name <value> set rulebase tunnel-inspect rules <name> monitor-options monitor-id <1-16777215> set rulebase tunnel-inspect rules <name> monitor-options log-setting-override set rulebase tunnel-inspect rules <name> monitor-options log-setting-override enable <yes|no> set rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-setting <value> set rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-start <yes|no> set rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-end <yes|no> set rulebase nat set rulebase nat rules set rulebase nat rules <name> set rulebase nat rules <name> from [ <from1> <from2>... ] set rulebase nat rules <name> to [ <to1> <to2>... ] set rulebase nat rules <name> source [ <source1> <source2>... ] set rulebase nat rules <name> destination [ <destination1> <destination2>... ] set rulebase nat rules <name> service <value> set rulebase nat rules <name> nat-type <ipv4|nat64|nptv6> set rulebase nat rules <name> to-interface <value>|<any> set rulebase nat rules <name> source-translation set rulebase nat rules <name> source-translation dynamic-ip-and-port set rulebase nat rules <name> source-translation dynamic-ip-and-port translated-address [ <translated-address1> <translated-address2>... ] set rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address set rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address interface <value> set rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address ip <value> set rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address floating-ip <value> set rulebase nat rules <name> source-translation dynamic-ip set rulebase nat rules <name> source-translation dynamic-ip translated-address [ <translated-address1> <translated-address2>... ] set rulebase nat rules <name> source-translation dynamic-ip fallback set rulebase nat rules <name> source-translation dynamic-ip fallback translated-address [ <translated-address1> <translated-address2>... ] set rulebase nat rules <name> source-translation dynamic-ip fallback interface-address set rulebase nat rules <name> source-translation dynamic-ip fallback interface-address interface <value> set rulebase nat rules <name> source-translation dynamic-ip fallback interface-address ip <value> set rulebase nat rules <name> source-translation dynamic-ip fallback interface-address floating-ip <value> set rulebase nat rules <name> source-translation static-ip set rulebase nat rules <name> source-translation static-ip translated-address <value>|<ip/netmask>|<ip-range> set rulebase nat rules <name> source-translation static-ip bi-directional <yes|no> set rulebase nat rules <name> destination-translation set rulebase nat rules <name> destination-translation translated-address <value>|<ip/netmask>|<ip-range> set rulebase nat rules <name> destination-translation translated-port <1-65535> set rulebase nat rules <name> destination-translation dns-rewrite set rulebase nat rules <name> destination-translation dns-rewrite direction <reverse|forward> set rulebase nat rules <name> dynamic-destination-translation set rulebase nat rules <name> dynamic-destination-translation translated-address <value>|<ip/netmask>|<ip-range> set rulebase nat rules <name> dynamic-destination-translation translated-port <1-65535> set rulebase nat rules <name> dynamic-destination-translation distribution <round-robin|source-ip-hash|ip-modulo|ip-hash|least-sessions> set rulebase nat rules <name> active-active-device-binding <primary|both|0|1> set rulebase nat rules <name> tag [ <tag1> <tag2>... ] set rulebase nat rules <name> disabled <yes|no> set rulebase nat rules <name> description <value> set rulebase nat rules <name> group-tag <value> set rulebase qos set rulebase qos rules set rulebase qos rules <name> set rulebase qos rules <name> from [ <from1> <from2>... ] set rulebase qos rules <name> to [ <to1> <to2>... ] set rulebase qos rules <name> source [ <source1> <source2>... ] set rulebase qos rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase qos rules <name> destination [ <destination1> <destination2>... ] set rulebase qos rules <name> service [ <service1> <service2>... ] set rulebase qos rules <name> category [ <category1> <category2>... ] set rulebase qos rules <name> application [ <application1> <application2>... ] set rulebase qos rules <name> source-hip [ <source-hip1> <source-hip2>... ] set rulebase qos rules <name> destination-hip [ <destination-hip1> <destination-hip2>... ] set rulebase qos rules <name> schedule <value> set rulebase qos rules <name> tag [ <tag1> <tag2>... ] set rulebase qos rules <name> negate-source <yes|no> set rulebase qos rules <name> negate-destination <yes|no> set rulebase qos rules <name> disabled <yes|no> set rulebase qos rules <name> description <value> set rulebase qos rules <name> group-tag <value> set rulebase qos rules <name> dscp-tos set rulebase qos rules <name> dscp-tos any set rulebase qos rules <name> dscp-tos codepoints set rulebase qos rules <name> dscp-tos codepoints <name> set rulebase qos rules <name> dscp-tos codepoints <name> ef set rulebase qos rules <name> dscp-tos codepoints <name> ef codepoint <ef> set rulebase qos rules <name> dscp-tos codepoints <name> af set rulebase qos rules <name> dscp-tos codepoints <name> af codepoint <af11|af12|af13|af21|af22|af23|af31|af32|af33|af41|af42|af43> set rulebase qos rules <name> dscp-tos codepoints <name> cs set rulebase qos rules <name> dscp-tos codepoints <name> cs codepoint <cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7> set rulebase qos rules <name> dscp-tos codepoints <name> tos set rulebase qos rules <name> dscp-tos codepoints <name> tos codepoint <cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7> set rulebase qos rules <name> dscp-tos codepoints <name> custom set rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint set rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint name <value> set rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint value <value> set rulebase qos rules <name> action set rulebase qos rules <name> action class <1|2|3|4|5|6|7|8> set rulebase pbf set rulebase pbf rules set rulebase pbf rules <name> set rulebase pbf rules <name> from set rulebase pbf rules <name> from zone [ <zone1> <zone2>... ] set rulebase pbf rules <name> from interface [ <interface1> <interface2>... ] set rulebase pbf rules <name> source [ <source1> <source2>... ] set rulebase pbf rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase pbf rules <name> destination [ <destination1> <destination2>... ] set rulebase pbf rules <name> service [ <service1> <service2>... ] set rulebase pbf rules <name> schedule <value> set rulebase pbf rules <name> tag [ <tag1> <tag2>... ] set rulebase pbf rules <name> negate-source <yes|no> set rulebase pbf rules <name> negate-destination <yes|no> set rulebase pbf rules <name> disabled <yes|no> set rulebase pbf rules <name> description <value> set rulebase pbf rules <name> group-tag <value> set rulebase pbf rules <name> application [ <application1> <application2>... ] set rulebase pbf rules <name> action set rulebase pbf rules <name> action forward set rulebase pbf rules <name> action forward egress-interface <value> set rulebase pbf rules <name> action forward nexthop set rulebase pbf rules <name> action forward nexthop ip-address <value>|<ip/netmask> set rulebase pbf rules <name> action forward nexthop fqdn <value> set rulebase pbf rules <name> action forward monitor set rulebase pbf rules <name> action forward monitor profile <value> set rulebase pbf rules <name> action forward monitor disable-if-unreachable <yes|no> set rulebase pbf rules <name> action forward monitor ip-address <ip/netmask> set rulebase pbf rules <name> action discard set rulebase pbf rules <name> action no-pbf set rulebase pbf rules <name> enforce-symmetric-return set rulebase pbf rules <name> enforce-symmetric-return enabled <yes|no> set rulebase pbf rules <name> enforce-symmetric-return nexthop-address-list set rulebase pbf rules <name> enforce-symmetric-return nexthop-address-list <name> set rulebase pbf rules <name> active-active-device-binding <both|0|1> set rulebase sdwan set rulebase sdwan rules set rulebase sdwan rules <name> set rulebase sdwan rules <name> from [ <from1> <from2>... ] set rulebase sdwan rules <name> to [ <to1> <to2>... ] set rulebase sdwan rules <name> source [ <source1> <source2>... ] set rulebase sdwan rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase sdwan rules <name> destination [ <destination1> <destination2>... ] set rulebase sdwan rules <name> application [ <application1> <application2>... ] set rulebase sdwan rules <name> service [ <service1> <service2>... ] set rulebase sdwan rules <name> tag [ <tag1> <tag2>... ] set rulebase sdwan rules <name> negate-source <yes|no> set rulebase sdwan rules <name> negate-destination <yes|no> set rulebase sdwan rules <name> disabled <yes|no> set rulebase sdwan rules <name> description <value> set rulebase sdwan rules <name> group-tag <value> set rulebase sdwan rules <name> path-quality-profile <value> set rulebase sdwan rules <name> saas-quality-profile <value> set rulebase sdwan rules <name> error-correction-profile <value> set rulebase sdwan rules <name> action set rulebase sdwan rules <name> action traffic-distribution-profile <value> set rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path> set rulebase dos set rulebase dos rules set rulebase dos rules <name> set rulebase dos rules <name> from set rulebase dos rules <name> from zone [ <zone1> <zone2>... ] set rulebase dos rules <name> from interface [ <interface1> <interface2>... ] set rulebase dos rules <name> to set rulebase dos rules <name> to zone [ <zone1> <zone2>... ] set rulebase dos rules <name> to interface [ <interface1> <interface2>... ] set rulebase dos rules <name> source [ <source1> <source2>... ] set rulebase dos rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase dos rules <name> destination [ <destination1> <destination2>... ] set rulebase dos rules <name> service [ <service1> <service2>... ] set rulebase dos rules <name> schedule <value> set rulebase dos rules <name> tag [ <tag1> <tag2>... ] set rulebase dos rules <name> negate-source <yes|no> set rulebase dos rules <name> negate-destination <yes|no> set rulebase dos rules <name> disabled <yes|no> set rulebase dos rules <name> description <value> set rulebase dos rules <name> group-tag <value> set rulebase dos rules <name> protection set rulebase dos rules <name> protection aggregate set rulebase dos rules <name> protection aggregate profile <value> set rulebase dos rules <name> protection classified set rulebase dos rules <name> protection classified profile <value> set rulebase dos rules <name> protection classified classification-criteria set rulebase dos rules <name> protection classified classification-criteria address <source-ip-only|destination-ip-only|src-dest-ip-both> set rulebase dos rules <name> action set rulebase dos rules <name> action deny set rulebase dos rules <name> action allow set rulebase dos rules <name> action protect set rulebase dos rules <name> log-setting <value> set rulebase network-packet-broker set rulebase network-packet-broker rules set rulebase network-packet-broker rules <name> set rulebase network-packet-broker rules <name> from [ <from1> <from2>... ] set rulebase network-packet-broker rules <name> to [ <to1> <to2>... ] set rulebase network-packet-broker rules <name> source [ <source1> <source2>... ] set rulebase network-packet-broker rules <name> source-user [ <source-user1> <source-user2>... ] set rulebase network-packet-broker rules <name> destination [ <destination1> <destination2>... ] set rulebase network-packet-broker rules <name> application [ <application1> <application2>... ] set rulebase network-packet-broker rules <name> service [ <service1> <service2>... ] set rulebase network-packet-broker rules <name> tag [ <tag1> <tag2>... ] set rulebase network-packet-broker rules <name> negate-source <yes|no> set rulebase network-packet-broker rules <name> negate-destination <yes|no> set rulebase network-packet-broker rules <name> disabled <yes|no> set rulebase network-packet-broker rules <name> description <value> set rulebase network-packet-broker rules <name> group-tag <value> set rulebase network-packet-broker rules <name> source-hip [ <source-hip1> <source-hip2>... ] set rulebase network-packet-broker rules <name> destination-hip [ <destination-hip1> <destination-hip2>... ] set rulebase network-packet-broker rules <name> traffic-type set rulebase network-packet-broker rules <name> traffic-type tls-decrypted <yes|no> set rulebase network-packet-broker rules <name> traffic-type tls-encrypted <yes|no> set rulebase network-packet-broker rules <name> traffic-type non-tls <yes|no> set rulebase network-packet-broker rules <name> action set rulebase network-packet-broker rules <name> action packet-broker-profile <value>

Recommended For You