CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

[Eric_Troldahl]

CVE-2024-3393 - Any tips on using Panorama in CLI mode SET output?

I have 8 anti-spyware profiles across about 10 HA Pairs - 2 predefined and 6 custom.  All in "Shared", not a DG.  Any references that would be able to be in a template are likely in a template.

It seems to me that until I can get my departments to give me upgrade windows I should set my DNS logging to NONE.

It also seems like trying to do all of this through the GUI will be time consuming and risk missing a click or two.

Can anyone advise on CLI Show/Set commands to find and modify the Anti-Spyware profiles in Panorama???

TIA,

Eric

[JayGolf]

Hi @Eric_Troldahl ,

You can view your config in set and search for commands related to spyware or any keyword you'd like to search for. 

> set cli config-output-format set
> configure
Entering configuration mode
[edit]
# show 
# show | match spyware