Run 'script' from CLI

L3 Networker

Run 'script' from CLI


I wonder if it is possible to create a run a user defined script from our VM-100's CLI.


The script should switch Policies / Authentication / <my CP profile> to 'web-form'


- and do 'clear session all filter from ClassNet '


If this is possible how do I switch on the auth policy and save / run the script from CLI?


Thanks a lot for help on this


regards Tor

Tags (1)
L7 Applicator

Re: Run 'script' from CLI


This is not possible via the CLI. The PAN is a hardend appliance and limits the commands. The PAN does have an API interface that you might be able to use to accomplish what you need.



L3 Networker

Re: Run 'script' from CLI

Thanks for the info. 


As of the


clear session all filter from <zone>


 .. can I also filter it further so it only targets a specific user or a user group?

regards Tor

Community Team Member

Re: Run 'script' from CLI

Hi @LCMember4427 ,


You can clear sessions based on the following filters :


admin@PA-200> clear session all filter 
+ application         Application name
+ ctd-ver             ctd version
+ decrypt-forwarded   session is decrypt forwarded
+ destination         destination IP address
+ destination-port    Destination port
+ destination-user    Destination user
+ dos-rule            DoS protection rule name
+ from                From zone
+ hw-interface        hardware interface
+ min-age             minimum age in seconds
+ min-kb              minimum KB of byte count
+ nat                 If session is NAT
+ nat-rule            NAT rule name
+ pbf-rule            Policy-Based-Forwarding rule name
+ protocol            IP protocol value
+ qos-class           QoS class
+ qos-node-id         QoS node-id value
+ qos-rule            QoS rule name
+ rule                Security rule name
+ source              source IP address
+ source-port         Source port
+ source-user         Source user
+ ssl-decrypt         session is decrypted
+ state               flow state
+ to                  To zone
+ tunnel-decap        session is outer tunnel with inspection enabled
+ tunnel-inspected    session is inside tunnel
+ type                flow type

Cheers !


L3 Networker

Re: Run 'script' from CLI


Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!