- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
03-06-2014 04:56 PM
I have a rather long list of allowed applications in a profile and want to export them for various reasons. I need to document them, and as I consolidate policies to a single on I don't want to add each one if I cam import them. Is there a CLI to just get the applications names in a given profile?
03-06-2014 06:00 PM
Hello Sir,
I am not sure about your requirement here. Could you please explain it in details. Are you looking for below mentioned command:
admin@PAN-FW# show rulebase security rules "Trust-to-Untrust"
"Trust-to-Untrust" {
from Trust;
to Untrust;
source any;
destination any;
service application-default;
application [ ping ssl web-browsing]; >>>>>>>>>>>>>>>>>>>>>>>>> List of applications
action allow;
source-user any;
option;
negate-source no;
negate-destination no;
disabled no;
log-end yes;
description "External user access Untrust";
log-setting log_Default;
}
03-06-2014 06:00 PM
Hello Sir,
I am not sure about your requirement here. Could you please explain it in details. Are you looking for below mentioned command:
admin@PAN-FW# show rulebase security rules "Trust-to-Untrust"
"Trust-to-Untrust" {
from Trust;
to Untrust;
source any;
destination any;
service application-default;
application [ ping ssl web-browsing]; >>>>>>>>>>>>>>>>>>>>>>>>> List of applications
action allow;
source-user any;
option;
negate-source no;
negate-destination no;
disabled no;
log-end yes;
description "External user access Untrust";
log-setting log_Default;
}
03-06-2014 08:28 PM
OK I got it. Had to be in configure mode to use command. Tailored it to my needs and found what I need. Thanks
03-06-2014 08:42 PM
Yes Sir, the above mentioned CLI command has to be run from configuration mode.
Thanks
03-09-2015 12:40 PM
You may want to check this document Export Palo Alto Security Policies to CSV file
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!