PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device

townesgs — Mon, 14 Sep 2015 16:48:13 GMT

I have a requirement to change the timeout values on all of the paloalto os preconfigured/default applications (2000+ applications). Using the web interface, it would require opening and configuring each individual application. Can anyone lend assistance by pointing me to a CLI script that can make easier work of this task.

Greg

Re: PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device

dmoudgil — Mon, 14 Sep 2015 21:39:52 GMT

Hi Greg,

Referencing this article, https://goo.gl/SyfLsM , you can use the following commands to set UDP and TCP timeouts:-
# set shared override application <application-name> udp-timeout <timeout-value>
# set shared override application <application-name> tcp-timeout <timeout-value>

You can leverage APIs as well:-

Browse to "API > Configuration Commands > shared > override > application" on PA firewall using "https://x.x.x.x/api" and select the application and then the path will look like (example 4shared application):-

API > Configuration Commands > shared > override > application > entry[@name='4shared'] > tcp-timeout

TCP TIMEOUT
XPath
/config/shared/override/application/entry[@name='4shared']/member[@name='tcp-timeout']

Rest API Url
/api/?type=config&action=get&xpath=/config/shared/override/application/entry[@name='4shared']/member[@name='tcp-timeout']

UDP TIMEOUT
API > Configuration Commands > shared > override > application > entry[@name='4shared'] > udp-timeout

XPath
/config/shared/override/application/entry[@name='4shared']/member[@name='udp-timeout']

Rest API Url
/api/?type=config&action=get&xpath=/config/shared/override/application/entry[@name='4shared']/member[@name='udp-timeout']

-Dinesh Moudgil

Please rate helpful posts.

topic PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device in General Topics

PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device

Re: PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device