About jls3j999

Your suggestion sounds good but my purpose is to get details about the subnets involved So as well as the list of all DENY rules whose action is actually "deny" I'd like to get further details on the network segment For instance, with reference to the rule called FTP-INBOUND-DENY, it would be great if I could see something like:  FTP-INBOUND-DENY 192.168.1.0/24 Through cli it would be better I believe   ... View more

@rmfalconer thanks this command works fine: show vsys vsys1 rulebase security | match deny example output: set vsys vsys1 rulebase security rules FTP-INBOUND-DENY action deny .... But I expected to get network details as well such as: 192.168.0.10/24  or whatever related to every rule whose action is equal to deny ... View more

After doing what you said this is the output: admin_user@FW-1(active-primary)> set cli config-output-format set admin_user@FW-1(active-primary)> configure Entering configuration mode [edit] admin_user@FW-1(active-primary)# show deviceconfig deviceconfig mgt-config mgt-config network network configuration predefined predefined shared shared template template vsys vsys | Pipe through a command <Enter> Finish input admin_user@FW-1(active-primary)# show rulebase security |match drop Invalid syntax. [edit] admin_user@FW-1(active-primary)#      can anyone help me? ... View more

can anyone help me? I mean are there any side-effects while entering the configuration mode? My purpose is to list all deny rules only (no changes should be made) thanks ... View more

thanks for your reply this is what I get superuser@point-1(active-primary)> configure Entering configuration mode [edit] superuser@point-1(active-primary)# show deviceconfig deviceconfig mgt-config mgt-config network network configuration predefined predefined shared shared template template vsys vsys | Pipe through a command <Enter> Finish input Since I'm a bit scared, the command you suggested does that make any changes? I suppose not I mean "show rulebase security | match drop" sorry for being a dummy ... View more