CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

Eric_Troldahl — Fri, 10 Jan 2025 16:46:18 GMT

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom. All in "Shared", not a DG. Any references that would be able to be in a template are likely in a template.

It seems to me that until I can get my departments to give me upgrade windows I should set my DNS logging to NONE.

It also seems like trying to do all of this through the GUI will be time consuming and risk missing a click or two.

Can anyone advise on CLI Show/Set commands to find and modify the Anti-Spyware profiles in Panorama???

TIA,

Eric

Re: CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

JayGolf — Thu, 16 Jan 2025 17:40:31 GMT

Hi @Eric_Troldahl ,

You can view your config in set and search for commands related to spyware or any keyword you'd like to search for.

> set cli config-output-format set
> configure
Entering configuration mode
[edit]
# show 
# show | match spyware

topic CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output? in General Topics

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

Re: CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?