Panorama CLI and XML API Changes

CLI and XML API changes to Panorama features in PAN-OS 8.1
PAN-OS 8.1 has the following CLI and XML API changes for Panorama features:
Feature
Change
Deploying content updates
The CLI commands to set and display thresholds for the Antivirus updates and Applications and Threats updates that the Panorama management server deploys to firewalls and Log Collectors have changed in PAN-OS 8.1.
  • PAN-OS 8.0.6 and later PAN-OS 8.0 releases have the following operational mode commands (which were unavailable in earlier releases):
    >
    request batch
    {content | anti-virus}
    threshold set
    <1-120>
    >
    request batch
    {content | anti-virus}
    threshold show
  • PAN-OS 8.1 release:
    #
    set deviceconfig system deployment-update-schedule
    <schedule_name>
    <update_type>
    recurring threshold
    <1-336>
    #
    show deviceconfig system deployment-update-schedule
    <schedule_name>
Request get-template-stack
The following command to view the template stack-level configuration is deprecated in PAN-OS 8.1:
>
request get-template-stack template-stack
<value>
xpath
<value>
transform
<value>
sortby
<value>
order
<value>
nrec
<value>
skip
<value>
dir
<value>
anchor
<value>
emptyok
<value>
shallow
<value>
xpaths request get-template-stack template-stack
<value>
xpath
<value>
transform
<value>
sortby
<value>
order
<value>
nrec
<value>
skip
<value>
dir
<value>
anchor
<value>
emptyok
<value>
shallow
<value>
xpaths entry
In PAN-OS 8.1, run the following command to view the stack-level configuration:
>
show template-stack
<name>
To view the merged configuration of a stack and all inherited templates, run the following command:
>
show template
<name>
Managed devices privileges
The CLI command to set administrative role privileges for managed devices has changed in PAN-OS 8.1.
  • PAN-OS 8.0 release:
    #
    set shared admin-role
    <name>
    role panorama webui panorama managed-devices
  • PAN-OS 8.1 release:
    #
    set shared admin-role
    <name>
    role panorama webui panorama managed-devices
    {summary | health}
    {enable | read-only | disable}
Context switch privileges
The CLI command to set context switch privileges for managed devices has changed in PAN-OS 8.1. You can configure a decryption profile and a decryption forwarding profile.
  • PAN-OS 8.0 release:
    #
    set shared admin-role
    <name>
    role panorama contextswitch objects decryption-profile
    {enable | read-only | disable}
  • PAN-OS 8.1 release:
    #
    set shared admin-role
    <name>
    role panorama contextswitch objects decryption
    {decryption-profile | decryption-forwarding-profile}
    {enable | read-only | disable}

Recommended For You