topic Why is "set address BLAH tag BLAH not working?! in General Topics

Why is "set address BLAH tag BLAH not working?!

Stevenjwilliams83 — Wed, 22 May 2019 19:14:17 GMT

admin@PA-5250-LOANER# show address TULLY
set address TULLY ip-netmask 192.168.15.245
set address TULLY tag Safenet_Listener_Service
[edit]
admin@PA-5250-LOANER# set address POPLICOLA tag Portal_Services

Server error : tag 'Portal_Services' is not a valid reference
[edit]
admin@PA-5250-LOANER#

Is there a syntax issue here that I am not seeing?

Re: Why is "set address BLAH tag BLAH not working?!

OtakarKlier — Wed, 22 May 2019 20:13:20 GMT

Hello,

Do you have Portal_Services defined anywhere?

Regards,

Re: Why is "set address BLAH tag BLAH not working?!

hshawn — Wed, 22 May 2019 20:17:32 GMT

Seems like you are doing it right as long as the tag exists (I am not sure you can dynamically create the tags like you can in the GUI)

Recently I added a few hundred objects by using the following (copy and paste into CLI)

set shared address 190.210.176.182 tag "BLOCKED IP" ip-netmask 190.210.176.182
set shared address 190.210.186.3 tag "BLOCKED IP" ip-netmask 190.210.186.3
set shared address 27.121.67.103 tag "BLOCKED IP" ip-netmask 27.121.67.103
set shared address 54.153.155.14 tag "BLOCKED IP" ip-netmask 54.153.155.14
set shared address 101.0.76.6 tag "BLOCKED IP" ip-netmask 101.0.76.6

This was on a Panorama (hence the "shared")

Here are other examples (no tag):

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHNCA0

If you do it without the tag does it work?

Are you in configure mode? I am assuming you are

disclaimer: The above IPs were identified as hosting EMOTET and are not secret sauce

Re: Why is "set address BLAH tag BLAH not working?!

Stevenjwilliams83 — Wed, 22 May 2019 22:00:53 GMT

It does work without the tag, but why cant I bulk import tags? seems silly.