topic Re: How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS in General Topics

How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS

a-takamura — Mon, 01 Jul 2024 02:37:09 GMT

Hello,

I'm working with PAN-OS 10.2 and need to set descriptions for various objects like address objects, service objects, and security policies using CLI commands in the set format. I'm struggling to include strings that contain line breaks, single quotes ('), and double quotes ("). Could someone guide me on how to properly format these special characters within the descriptions?

Thank you in advance for your assistance!

Re: How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS

kiwi — Mon, 01 Jul 2024 07:50:09 GMT

Hi @a-takamura ,

As far as I know this isn't implemented yet.

However, there's a past discussion on the topic where user @ThomasPaine used a workaround using a benign config stanza:

https://live.paloaltonetworks.com/t5/general-topics/comments-in-cli/td-p/176425

There's also an existing feature request where you can ask your local SE to have your voted added:

FR-ID: NSFR-I-26529

Kind regards,

-Kim.

Re: How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS

reaper — Mon, 01 Jul 2024 10:01:44 GMT

For a comment that contains quotes, you need to package the comment inside single quotes like so:

set address example description '"lazorz"'

but for line breaks i don't think you can do that from CLI at this time

Re: How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS

a-takamura — Mon, 01 Jul 2024 10:31:30 GMT

Thank you for the clarification regarding quotes. I understand that for descriptions with quotes, I should encapsulate them within single quotes as demonstrated.

However, regarding line breaks, I have another question. In the GUI, it's possible to include line breaks and other free-form text in descriptions for various objects. Is it indeed impossible to do this via the CLI? I assumed there might be escape sequences to handle this, but the following command results in an error:

set rulebase security rules Test-Policy description "This is a \"test policy\".\nThis is a 'new line'."

Could it be that there are no escape sequences available for this purpose in the CLI?

Re: How to Include Line Breaks and Quotes in Descriptions using CLI Commands in PAN-OS

reaper — Tue, 02 Jul 2024 07:55:26 GMT

as far as i've found there are no escape characters

once you 'encapsulate' any characters inside the quotes is treated as cleartext