Management CLI and XML API Changes

CLI and XML API changes to firewall management features in PAN-OS 8.1.
PAN-OS 8.1 has the following CLI and XML API changes for firewall management features:
Feature
Change
High availability (HA) settings
The syntax to set the HA group ID changed in PAN-OS 8.1. To set the group ID, you now enter
group group-id
followed by the group ID number.
  • PAN-OS 8.0 and earlier releases:
    #
    set deviceconfig high-availability group
    <name>
  • PAN-OS 8.1 release:
    #
    set deviceconfig high-availability group group-id
    <1-63>
Core logs (
PA-200 and PA-220 firewalls only
)
The CLI command to allocate logdb storage for large core files now allocates 128MB instead of 4GB. This changed because allocating 4GB caused a commit error on these models.
#
set deviceconfig setting management large-core
Rule use
The CLI command to view used and unused rules changed. In PA-OS 8.1, you must add the
highlight
option.
  • PAN-OS 8.0 and earlier releases:
    >
    show running rule-use vsys
    <value>
    rule-base
  • PAN-OS 8.1 release:
    >
    show running rule-use highlight vsys
    <value>
    rule-base

Recommended For You