PanOS CLI show tags?

BoDollis — Fri, 15 Nov 2019 14:09:05 GMT

I can tag a rule via CLI, but how can I ask Panorama to show me rules tagged with tag-name?

set device-group DG-Name security rules "Existing-rule-name" tag tag-name

Re: PanOS CLI show tags?

S.Cantwell — Fri, 15 Nov 2019 19:20:24 GMT

Hello there.

With a little bit a practice, this is what I would do:

(Even though I am showing commands from a FW, the same/similar commands would work on Panorama

admin@firewall-a# run set cli config-output-format set
admin@firewall-a# show | match tag

This is output from what the FW/Panorama would show... (anything with the word tag on it)

If you wanted to be more granular... you could change the | match <granular tag here> to find only the specific tag

set tag danger color color7
set tag egress color color3
set tag dmz color color6
set tag internal color color4
set rulebase nat rules gp-portal-no-nat tag internal
set rulebase nat rules gp-portal-no-nat group-tag internal

topic PanOS CLI show tags? in General Topics

PanOS CLI show tags?

Re: PanOS CLI show tags?