Prisma SD-WAN ION CLI Reference
    : dump security-policy config policy-rules
    Focus
    Focus
    1. Home
    2. Prisma
    3. Prisma SD-WAN
    4. Prisma SD-WAN ION CLI Reference
    5. Use CLI Commands
    6. Dump Commands
    7. dump security-policy config policy-rules

    Prisma SD-WAN ION CLI Reference

    dump security-policy config policy-rules

    Table of Contents

    dump security-policy config policy-rules

    Use the
    dump security-policy config policy-rules
     command to display the security policy rule configuration for a device.
    Information displayed includes the security policy rule name, action, state, source zone ids, destination zone ids, and application definition ids.

    Command

    dump security-policy config policy-rules ( all | policy-rule=
				
    policy-rule name
     | application=
				
    application definition name
     | source-zone=
				
    source zone name
     | dest-zone=
				
    destination zone name
     | action= (allow | deny | reject) | state=( enabled | disabled ))+ ]

    Options

    all
    Enter all to display configuration of all security policy rules on the device.
    application
    Enter an application name to display policy rules for the application.
    source-zone
    Enter the source zone to display configuration of security policy rules for the source zone.
    dest-zone
    Enter the destination zone to display configuration of security policy rules for the destination zone.
    action
    Enter allow to display configuration for those security policy rules where the action is set to allow.
    Enter deny to display configuration for those security policy rules where the action is set to deny.
    Enter reject to display configuration for those security policy rules where the action is set to reject.
    policy-rule
    Enter an application definition policy rule name to display information for the policy rule.
    state
    Enter enabled to display configuration for those security policy rules where the state is set to enabled.
    Enter disabled to display configuration for those security policy rules where the state is set to disabled.

    Command Notes

    Role
    Super, Read Only, Monitor
    Related Commands
    dump security-policy config policy-sets
    Introduced in
    Release 4.5.1

    Example

    dump security-policy config policy-rules all
				Security Policy Rule ID : 16246315738930189
				Security Policy Rule Name : Rule1-Set2-20
				Action : allow
				Rule-Type : custom
				Enabled : true
				Source Zones :       
				      16200471619100074: Zone-LAN
				Destination Zones :       
				      16204672468290016: Zone-Internet-VPN
				Applications :        
				      ANY
				Source Prefix Filters :       
				      16242993172060125: LAN-192-168-7-100
				Destination Prefix Filters :       
				      16242993943320129: DC-192-168-20-0
				Services : 
				      Protocol : 6  
				Source Port Range :   
				      ANY  
				Destination Port Range :    
				      from : 5005    
				      to   : 5015    
				      from : 5020   
				      to   : 5025  
				      Protocol : 17  
				Source Port Range :    
				      ANY  
				Destination Port Range :    
				      from : 5005    
				      to   : 5015  
				      Protocol : 1  
				Source Port Range :    
				      ANY  
				Destination Port Range :    
				      ANY				
				...

    Recommended For You

    © 2024 Palo Alto Networks, Inc. All rights reserved.