FQDN Table in CLI

agrgic — Sat, 01 Sep 2012 23:31:41 GMT

Hi,

does anybody knows what is the meaning of CLI output for > request system fqdn show, that states for fqdn object ...Not used

Some fqdn objects that i've configured, PAN has resolved, but for some there is output Not used. I'm sure that those fqdn's are in use. For example when i use nslookup those get resolved.

thnx,

Re: FQDN Table in CLI

UhMayYeah — Sun, 02 Sep 2012 00:44:13 GMT

Hello,

FQDN object would show "Not Used" when its not defined in the Security-rule.

You can always manually refresh the FQDN table using cli command

> request system fqdn refresh

A Job FqdnRefresh is triggered everytime commit is executed.

To verify if an object is being used in an active security policy execute :

>show running security-policy | match <Resolved IP of the FQDN>

-Ameya

topic Re: FQDN Table in CLI in General Topics

FQDN Table in CLI

Re: FQDN Table in CLI