CLI and XML API changes to firewall management features
in PAN-OS 8.1.
PAN-OS 8.1 has the following CLI and XML API changes
for firewall management features:
Feature
Change
High availability (HA) settings
The syntax to set the HA group
ID changed in PAN-OS 8.1. To set the group ID, you now enter
group group-id
followed
by the group ID number.
PAN-OS 8.0 and earlier releases:
#
set deviceconfig high-availability group
<name>
PAN-OS 8.1 release:
#
set deviceconfig high-availability group group-id
<1-63>
Core logs (
PA-200 and PA-220 firewalls
only
)
The CLI command to allocate
logdb storage for large core files now allocates 128MB instead of
4GB. This changed because allocating 4GB caused a commit error on these
models.
#
set deviceconfig setting management large-core
Rule use
The CLI command to view used and unused rules
changed. In PA-OS 8.1, you must add the