Use show commands to view configuration settings and statistics about the performance of the firewall or Panorama and about the traffic and threats identified on the firewall. You can use show commands in both Operational and Configure mode. For example, the show system info command shows information about the device itself:
admin@7-1-VM> show system info
hostname: 7-1-VM
ip-address: 10.3.4.5
netmask: 255.255.254.0
default-gateway: 10.3.4.1
ipv6-address: unknown
ipv6-link-local-address: fe80::250:56ff:fe80:985/64
ipv6-default-gateway:
mac-address: 00:50:56:80:09:85
time: Fri May 15 09:30:00 2015
uptime: 3 days, 22:47:08
family: vm
model: PA-VM
serial: 007200002624
vm-mac-base: 12:AB:11:0D:F3:00
vm-mac-count: 256
vm-uuid: 420013AB-65BC-87C4-86E2-0AC98AEE8FED
vm-cpuid: D7060200FFFBAB1F
vm-license: VM-300
vm-mode: VMWare ESXi
sw-version: 7.1.0
global-protect-client-package-version: 0.0.0
app-version: 499-2704
app-release-date: 2015/05/12 19:00:40
av-version: 1962-2389
av-release-date: 2015/05/14 15:26:18
threat-version: 499-2704
threat-release-date: 2015/05/12 19:00:40
wf-private-version: 0
wf-private-release-date: unknown
url-db: paloaltonetworks
wildfire-version: 66781-75744
wildfire-release-date: 2015/05/15 09:16:53
url-filtering-version: 2015.05.14.418
global-protect-datafile-version: 0
global-protect-datafile-release-date: unknown
logdb-version: 7.1.0
platform-family: vm
vpn-disable-mode: off
multi-vsys: off
operational-mode: normal
admin@7-1-VM>
The show session info command shows details about the sessions running through the Palo Alto Networks device.
admin@7-1-VM> show session info
--------------------------------------------------------------------------------
Number of sessions supported: 249998
Number of active sessions: 58834
Number of active TCP sessions: 34522
Number of active UDP sessions: 24258
Number of active ICMP sessions: 3
Number of active BCAST sessions: 0
Number of active MCAST sessions: 0
Number of active predict sessions: 356
Session table utilization: 23%
Number of sessions created since bootup: 53595006
Packet rate: 11984/s
Throughput: 66257 kbps
New connection establish rate: 138 cps
--------------------------------------------------------------------------------
Session timeout
TCP default timeout: 3600 secs
TCP session timeout before SYN-ACK received: 5 secs
TCP session timeout before 3-way handshaking: 10 secs
TCP half-closed session timeout: 120 secs
TCP session timeout in TIME_WAIT: 15 secs
TCP session timeout for unverified RST: 30 secs
UDP default timeout: 30 secs
ICMP default timeout: 6 secs
other IP default timeout: 30 secs
Captive Portal session timeout: 30 secs
Session timeout in discard state:
TCP: 90 secs, UDP: 60 secs, other IP protocols: 60 secs
--------------------------------------------------------------------------------
Session accelerated aging: True
Accelerated aging threshold: 80% of utilization
Scaling factor: 2 X
--------------------------------------------------------------------------------
Session setup
TCP - reject non-SYN first packet: True
Hardware session offloading: True
IPv6 firewalling: True
Strict TCP/IP checksum: True
ICMP Unreachable Packet Rate: 200 pps
--------------------------------------------------------------------------------
Application trickling scan parameters:
Timeout to determine application trickling: 10 secs
Resource utilization threshold to start scan: 80%
Scan scaling factor over regular aging: 8
--------------------------------------------------------------------------------
Session behavior when resource limit is reached: drop
--------------------------------------------------------------------------------
Pcap token bucket rate : 10485760
--------------------------------------------------------------------------------

Related Documentation