topic Re: invalid syntax delete rulebase security rules (rulename) in General Topics

invalid syntax delete rulebase security rules (rulename)

KurdTech — Mon, 12 Jul 2021 21:58:58 GMT

Hello There,

I am running PA-OS 8.1.19. i attempt to delete a security policy via CLI, However, I get an error of Invalid Syntax. Does anyone know what did i miss.i looked at several docs and all indicate i am using a correct CLI command

PAN>configure

PAN#delete rulebase security rules LAN

Invalid Syntax.

[edit]

FYI i locked my self-out in PAN. the only way i can access to the PAN is via console.

If i can't delete the security rule, can I edit the security rule (LAN)? If yes, what is the correct CLI.

Thank you in advance.

Re: invalid syntax delete rulebase security rules (rulename)

batd2 — Tue, 13 Jul 2021 08:24:31 GMT

@KurdTech This is the correct syntax. Is your account a superuser?

You can also try disabling the rule:

# set rulebase security rules LAN disabled yes

# commit

Re: invalid syntax delete rulebase security rules (rulename)

Mick_Ball — Tue, 13 Jul 2021 12:29:47 GMT

as per @batd2 , looks fine. perhaps see which part of the line it does not like ..

"?" to see if delete is listed..

"delete ?" ---to see if rulebase is listed.

"delete rulebase ?" ---to see if security listed...

"delete rulebase security ?" ---etc etc .... to see which part failing...

Re: invalid syntax delete rulebase security rules (rulename)

aleksandar.astardzhiev — Tue, 13 Jul 2021 14:59:32 GMT

Hi @KurdTech ,

Is this firewall managed by Panorama or it is locally managed?

Re: invalid syntax delete rulebase security rules (rulename)

KurdTech — Tue, 13 Jul 2021 21:39:04 GMT

Hello Alexander,

its managed locally. i was able to resolve the issue by accessing PAN via MGMT interface

Re: invalid syntax delete rulebase security rules (rulename)

KurdTech — Tue, 13 Jul 2021 21:44:34 GMT

Hello Batd2,

thank you for your reply. Yes, my account have supper user privilege. i was able to resolve the issue by resetting the MGMT interface and access pan.

Just for the future use, i will keep it in mind

Re: invalid syntax delete rulebase security rules (rulename)

KurdTech — Tue, 13 Jul 2021 21:51:35 GMT

Hello Mickball,

that's correct, i already try that and follow each path just to find a right syntax, couldn't fine it.