Management CLI and XML API Changes

CLI and XML API changes to firewall management features in PAN-OS 8.1.
PAN-OS 8.1 has the following CLI and XML API changes for firewall management features:
FeatureChange
High availability (HA) settings
The syntax to set the HA group ID changed in PAN-OS 8.1. To set the group ID, you now enter group group-id followed by the group ID number.
  • PAN-OS 8.0 and earlier releases:
    # set deviceconfig high-availability group <name>
    Code copied to clipboard
    Unable to copy due to lack of browser support.
  • PAN-OS 8.1 release:
    # set deviceconfig high-availability group group-id <1-63>
    Code copied to clipboard
    Unable to copy due to lack of browser support.
Core logs (PA-200 and PA-220 firewalls only)
The CLI command to allocate logdb storage for large core files now allocates 128MB instead of 4GB. This changed because allocating 4GB caused a commit error on these models.
# set deviceconfig setting management large-core
Code copied to clipboard
Unable to copy due to lack of browser support.
Rule use
The CLI command to view used and unused rules changed. In PA-OS 8.1, you must add the highlight option.
  • PAN-OS 8.0 and earlier releases:
    > show running rule-use vsys <value> rule-base
    Code copied to clipboard
    Unable to copy due to lack of browser support.
  • PAN-OS 8.1 release:
    > show running rule-use highlight vsys <value> rule-base
    Code copied to clipboard
    Unable to copy due to lack of browser support.

Related Documentation