topic PAN-OS command for view a rule in Panorama Discussions

PAN-OS command for view a rule

carlostg — Mon, 20 Sep 2021 06:00:51 GMT

Hello,

I am looking for a command in PAN-OS for view one rule created by GUI but I can't find it.

I want to view a rule configured searching it by rule name or by rule number. Best the first option.

Anybody can help me?

Thanks in advance

Re: PAN-OS command for view a rule

SutareMayur — Mon, 20 Sep 2021 08:38:44 GMT

Hi @carlostg ,

Below commands should help you to see the policies configured on the firewall. You can filter the output by putting required filter after pipe (|) to see exact matching policies.

show running security-policy

show running nat-policy

e.g. If you want to see only names on the security policy without any details, then you can try below syntax. Accordingly you can try different match conditions to filter the security polices.

show running security-policy | match index

Hope it helps!

Re: PAN-OS command for view a rule

carlostg — Mon, 20 Sep 2021 08:54:46 GMT

Thank you @SutareMayur .

I tried

show running security-policy | match hello

but it doesn't work. It doesn't show me anything

I also tried

show running security-policy | match rule eq hello

and It says invalid syntax

I have a rule name hello to test

I want to view the rule named hello with all the details

Could anybody help me?

Re: PAN-OS command for view a rule

Alpalo — Mon, 20 Sep 2021 10:01:14 GMT

Hello,

Maybe the link can help for you https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaCCAS

Check it and let me if it was helped

Re: PAN-OS command for view a rule

carlostg — Mon, 20 Sep 2021 13:32:57 GMT

Thanks @Alpalo but It didn't help me

show running security-policy | match hello

Doesn't show anything

show rulebase security rules <rulename>

I can't execute this command in configure mode as the procedure mentioned, I have no this command.

Here are my permissions in CLI

show cli permissions

Admin role: superuser
Device administrator: True
Query prefix: (null)
Session hide user: False
Session hide IP: False
Accessible Virtual System: all

Version info:

sw-version: 9.1.7