topic PaloAlto Firewall CLI partial commit by object-xpaths in General Topics

PaloAlto Firewall CLI partial commit by object-xpaths

indoungwe — Tue, 10 Jan 2023 14:34:54 GMT

Hello,

I`m trying to include only single object into commit.

Web interface allows to exclude objects from commit:

On the first glance looks like CLI could provide such option:

USER@Device# commit partial
+ description Enter commit description
+ device-and-network device-and-network
+ policy-and-objects policy-and-objects
+ shared-object shared-object
> admin admin
> object-xpaths object-xpaths
<Enter> Finish input

But I did not found any examples or documentation.

Idea is to command be like:
commit partial object-xpaths [/config/devices/entry[@name='localhost.localdomain']/network/virtual-router/entry[@name='NAME']]

Re: PaloAlto Firewall CLI partial commit by object-xpaths

JayGolf — Wed, 11 Jan 2023 05:21:53 GMT

Hi @indoungwe ,

For the partial commit in the CLI it looks like you can only specify device-and-network, policy-and-objects, shared-object, and admin.

For example, if you made a change in the Security policy only, you might want to commit just the policy and objects portion of the configuration as follows:

admin@PA-220#

commit partial device-and-network excluded

I see the changes you made look to be all in Device and Network. If we apply the same logic from the example, "commit partial policy-and-objects excluded" will commit all of what you have shown.

Could you try "commit device-and-network" and then tab to see if it gives you an option for input. Maybe you could specify the single object.