PAN-OS 5.0 CLI script to change TCP and UDP Timeout Values for Default Applications on device

[townesgs]

I have a requirement to change the timeout values on all of the paloalto os preconfigured/default applications (2000+ applications). Using the web interface, it would require opening and configuring each individual application.  Can anyone lend assistance by pointing me to a CLI script that can make easier work of this task.

Greg

[dmoudgil]

Hi Greg,

Referencing this article, https://goo.gl/SyfLsM , you can use the following commands to set UDP and TCP timeouts:-
# set shared override application <application-name> udp-timeout <timeout-value>
# set shared override application <application-name> tcp-timeout <timeout-value>

You can leverage APIs as well:-

Browse to "API > Configuration Commands > shared > override > application" on PA firewall using "https://x.x.x.x/api" and select the application and then the path will look like (example 4shared application):-

API > Configuration Commands > shared > override > application > entry[@name='4shared'] > tcp-timeout

TCP TIMEOUT
XPath
/config/shared/override/application/entry[@name='4shared']/member[@name='tcp-timeout']

Rest API Url
/api/?type=config&action=get&xpath=/config/shared/override/application/entry[@name='4shared']/member[@name='tcp-timeout']

UDP TIMEOUT
API > Configuration Commands > shared > override > application > entry[@name='4shared'] > udp-timeout

XPath
/config/shared/override/application/entry[@name='4shared']/member[@name='udp-timeout']

Rest API Url
/api/?type=config&action=get&xpath=/config/shared/override/application/entry[@name='4shared']/member[@name='udp-timeout']

-Dinesh Moudgil

Please rate helpful posts.