topic Re: Run 'script' from CLI in General Topics

Run 'script' from CLI

LCMember4427 — Mon, 29 Apr 2019 11:44:27 GMT

Hi,

I wonder if it is possible to create a run a user defined script from our VM-100's CLI.

The script should switch Policies / Authentication / <my CP profile> to 'web-form'

- and do 'clear session all filter from ClassNet '

If this is possible how do I switch on the auth policy and save / run the script from CLI?

Thanks a lot for help on this

regards Tor

Re: Run 'script' from CLI

OtakarKlier — Mon, 29 Apr 2019 18:05:30 GMT

Hello,

This is not possible via the CLI. The PAN is a hardend appliance and limits the commands. The PAN does have an API interface that you might be able to use to accomplish what you need.

Regards,

Re: Run 'script' from CLI

LCMember4427 — Mon, 29 Apr 2019 22:26:54 GMT

Thanks for the info.

As of the

clear session all filter from <zone>

.. can I also filter it further so it only targets a specific user or a user group?

regards Tor

Re: Run 'script' from CLI

kiwi — Tue, 30 Apr 2019 07:10:11 GMT

Hi @LCMember4427 ,

You can clear sessions based on the following filters :

admin@PA-200> clear session all filter 
+ application         Application name
+ ctd-ver             ctd version
+ decrypt-forwarded   session is decrypt forwarded
+ destination         destination IP address
+ destination-port    Destination port
+ destination-user    Destination user
+ dos-rule            DoS protection rule name
+ from                From zone
+ hw-interface        hardware interface
+ min-age             minimum age in seconds
+ min-kb              minimum KB of byte count
+ nat                 If session is NAT
+ nat-rule            NAT rule name
+ pbf-rule            Policy-Based-Forwarding rule name
+ protocol            IP protocol value
+ qos-class           QoS class
+ qos-node-id         QoS node-id value
+ qos-rule            QoS rule name
+ rule                Security rule name
+ source              source IP address
+ source-port         Source port
+ source-user         Source user
+ ssl-decrypt         session is decrypted
+ state               flow state
+ to                  To zone
+ tunnel-decap        session is outer tunnel with inspection enabled
+ tunnel-inspected    session is inside tunnel
+ type                flow type

Cheers !

-Kiwi.

Re: Run 'script' from CLI

LCMember4427 — Tue, 30 Apr 2019 07:13:45 GMT

Thanks!