PAN-OS CLI Quick Start
    : Set Commands Removed in PAN-OS 10.0
    Focus
    Download PDF
    Focus
    1. Home
    2. PAN-OS
    3. PAN-OS CLI Quick Start
    4. CLI Changes in PAN-OS 10.0
    5. Set Commands Removed in PAN-OS 10.0
    Download PDF

    PAN-OS CLI Quick Start

    Set Commands Removed in PAN-OS 10.0

    Table of Contents
    End-of-Life (EoL)

    Set Commands Removed in PAN-OS 10.0

    Command line interface 'set' commands that are removed in PAN-OS 10.0:
    The following commands are no longer available in the 10.0 release.
    Replaced set deviceconfig system ssh ciphers with set deviceconfig system ssh profiles.
    
set deviceconfig system ssh ciphers
set deviceconfig system ssh mac
set deviceconfig system ssh kex
    Replaced set deviceconfig system ssh ciphers, kex, mac mgmt with set deviceconfig system ssh profiles mgmt-profiles and set deviceconfig system ssh mgmt
    
set deviceconfig system ssh ciphers mgmt 
set deviceconfig system ssh mac mgmt
set deviceconfig system ssh kex mgmt
    The following commands are no longer available.
    
set deviceconfig system ssh default-hostkey
set deviceconfig system ssh default-hostkey ha
set deviceconfig system ssh default-hostkey ha key-type
set deviceconfig system ssh default-hostkey ha key-type ECDSA<256|384|521>
set deviceconfig system ssh default-hostkey ha key-type RSA <2048|3072|4096>
set deviceconfig system ssh default-hostkey mgmt
set deviceconfig system ssh default-hostkey mgmt key-type
set deviceconfig system ssh default-hostkey mgmt key-type ECDSA <256|384|521>
set deviceconfig system ssh default-hostkey mgmt key-type RSA <2048|3072|4096>
set deviceconfig system ssh default-hostkey mgmt key-type all

    
set deviceconfig system ssh session-rekey
set deviceconfig system ssh session-rekey ha
set deviceconfig system ssh session-rekey ha data<10-4000>|<default>
set deviceconfig system ssh session-rekey ha interval <10-3600>|<none>
set deviceconfig system ssh session-rekey ha packets <12-27>|<default>
set deviceconfig system ssh session-rekey mgmt
set deviceconfig system ssh session-rekey mgmt data <10-4000>|<default>
set deviceconfig system ssh session-rekey mgmt interval <10-3600>|<none>
set deviceconfig system ssh session-rekey mgmt packets <12-27>|<default>

    
set deviceconfig high-availability group monitoring path-monitoring path-group virtual-wire<name> destination-ip  [ <destination-ip1> <destination-ip2>... ]
set deviceconfig high-availability group monitoring path-monitoring path-group vlan <name> destination-ip  [ <destination-ip1> <destination-ip2>... ]
set deviceconfig high-availability group monitoring path-monitoring path-group virtual-router <name> destination-ip  [ <destination-ip1> <destination-ip2>... ]

    
set shared profiles hip-objects<name> host-info criteria os contains IoT <value>
set shared profiles url-filtering <name> categorychange  [ <categorychange1> <categorychange2>... ]

    
set shared reports <name> type appstat group-by <category-of-name|name|risk|risk-of-name|technology-of-name|container-of-name|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name>

set shared reports <name> type appstat group-by <category-of-name|name|risk|risk-of-name|subcategory-of-name|technology-of-name|container-of-name|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name>

set shared reports <name> type appstat sortby <nbytes|npkts|nsess|nthreats>

set shared reports <name> type threat group-by <action|app|category-of-app|category-of-threatid|direction|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|threatid|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|threat-type|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method>

set shared reports <name> type thsum sortby <count|nunique-of-users>

set shared reports <name> type traffic group-by <action|app|category|category-of-app|dport|dst|dstuser|from|inbound_if|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sessionid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|session_end_reason|vsys_name|device_name|action_source|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set shared reports <name> type urlsum group-by <app|src|srcuser|category|dst|dstuser|rule|rule_uuid|dstloc|srcloc|vsys_name|device_name|from|to|serial|inbound_if|outbound_if|dport|action|url_domain|user_agent|category-of-app|subcategory-of-app|risk-of-app|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|dynusergroup_name>
	
set shared reports <name> type trsum group-by <action|app|category|category-of-app|dport|dst|dstuser|from|inbound_if|outbound_if|risk-of-app|rule|rule_uuid|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set shared reports <name> type trsum sortby <bytes|sessions|bytes_sent|bytes_received|nthreats|nftrans|ndpmatches|nurlcount|ncontent|nunique-of-users|nunique-of-apps>

set shared reports <name> type userid group-by <vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|user|datasourcename|beginport|endport|datasource|datasourcetype|factortype|factorcompletiontime|factorno|subtype>

set shared reports <name> type auth group-by <time_generated|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|user|normalize_user|object|authpolicy|authid|vendor|clienttype|serverprofile|desc|event|factorno|authproto|rule_uuid>

set shared reports <name> type iptag group-by <time_generated|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|tag_name|event_id|datasourcename|datasource_type|datasource_subtype>

set shared reports <name> type hipmatch group-by <machinename|matchname|src|srcipv6|srcuser|matchtype|vsys|device_name|vsys_name|os|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time>

    				 	
set shared reports <name> type hipmatch group-by <machinename|matchname|src|srcipv6|srcuser|matchtype|vsys|device_name|vsys_name|os|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time>	
	
set shared reports <name> type hipmatch labels  [ <labels1> <labels2>... ]			
set shared reports <name> type hipmatch last-match-by <time_generated>			
set shared reports <name> type hipmatch sortby <repeatcnt>	

    
set shared admin-role<name> role device webui network global-protect device-block-list <enable|read-only|disable>

    
set vsys <name> ssl-tls-service-profile <name> protocol-settings max-version <tls1-0|tls1-1|tls1-2|max>
set vsys <name> user-id-agent
set vsys <name> user-id-agent <name>
set vsys <name> user-id-agent <name> serial-number <value>
set vsys <name> user-id-agent <name> host-port
set vsys <name> user-id-agent <name> host-port host <ip/netmask>|<value>
set vsys <name> user-id-agent <name> host-port port <1-65535>
set vsys <name> user-id-agent <name> host-port ldap-proxy <yes|no>
set vsys <name> user-id-agent <name> host-port ntlm-auth <yes|no>
set vsys <name> user-id-agent <name> host-port collectorname <value>
set vsys <name> user-id-agent <name> host-port secret <value>
set vsys <name> user-id-agent <name> disabled <yes|no>
set vsys <name> user-id-agent <name> enable-hip-collection <yes|no>
set vsys <name> user-id-agent-sequence
set vsys <name> user-id-agent-sequence user-id-agents  [ <user-id-agents1> <user-id-agents2>... ]
set vsys <name> user-id-collector setting collectorname <value>
set vsys <name> user-id-collector setting secret <value>

    
set vsys <name> profiles hip-objects <name> host-info criteria os contains IoT <value>

    
set vsys <name> reports <name> period <last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-7-calendar-days|last-calendar-week|last-30-days|last-30-calendar-days|last-calendar-month>

set vsys <name> reports <name> type appstat group-by <category-of-name|name|risk|risk-of-name|subcategory-of-name|technology-of-name|container-of-name|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name>

set vsys <name> reports <name> type appstat sortby <nbytes|npkts|nsess|nthreats>

set vsys <name> reports <name> type threat group-by <action|app|category-of-app|category-of-threatid|direction|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|threatid|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|threat-type|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method>

set vsys <name> reports <name> type url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|vsys_name|device_name|url|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list>

set vsys <name> reports <name> type wildfire group-by <app|category|category-of-app|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|filetype|filename|filedigest|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set vsys <name> reports <name> type data group-by <action|app|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|threatid|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|data-type|filename|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set vsys <name> reports <name> type thsum group-by <action|app|category-of-app|category-of-threatid|direction|dport|dst|dstuser|from|inbound_if|outbound_if|risk-of-app|rule|rule_uuid|severity|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|to|threatid|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|threat-type|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|dynusergroup_name>

set vsys <name> reports <name> type thsum sortby <count|nunique-of-users>

set vsys <name> reports <name> type traffic group-by <action|app|category|category-of-app|dport|dst|dstuser|from|inbound_if|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sessionid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|session_end_reason|vsys_name|device_name|action_source|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set vsys <name> reports <name> type traffic sortby <bytes|bytes_sent|bytes_received|elapsed|packets|pkts_sent|pkts_received|repeatcnt|nunique-of-users>

set vsys <name> reports <name> type urlsum group-by <app|src|srcuser|category|dst|dstuser|rule|rule_uuid|dstloc|srcloc|vsys_name|device_name|from|to|serial|inbound_if|outbound_if|dport|action|url_domain|user_agent|category-of-app|subcategory-of-app|risk-of-app|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|dynusergroup_name>

set vsys <name> reports <name> type urlsum sortby <repeatcnt|nunique-of-users>

set vsys <name> reports <name> type trsum group-by <action|app|category|category-of-app|dport|dst|dstuser|from|inbound_if|outbound_if|risk-of-app|rule|rule_uuid|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel>

set vsys <name> reports <name> type trsum sortby <bytes|sessions|bytes_sent|bytes_received|nthreats|nftrans|ndpmatches|nurlcount|ncontent|nunique-of-users|nunique-of-apps>
    
set vsys<name> reports <name> type tunnel group-by <action|app|category-of-app|dport|dst|dstuser|from|inbound_if|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sessionid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|session_end_reason|action_source|tunnel|tunnel_insp_rule>

set vsys <name> reports <name> type tunnelsum group-by <action|app|category-of-app|dst|risk-of-app|rule|rule_uuid|src|subcategory-of-app|technology-of-app|container-of-app|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|tunnel|tunnel_insp_rule>

set vsys <name> reports <name> type userid group-by <vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|user|datasourcename|beginport|endport|datasource|datasourcetype|factortype|factorcompletiontime|factorno|subtype>

set vsys <name> reports <name> type auth group-by <time_generated|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|user|normalize_user|object|authpolicy|authid|vendor|clienttype|serverprofile|desc|event|factorno|authproto|rule_uuid>

set vsys <name> reports <name> type auth sortby <repeatcnt|vendor|time_generated>

set vsys <name> reports <name> type iptag group-by <time_generated|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|ip|tag_name|event_id|datasourcename|datasource_type|datasource_subtype>

    © 2024 Palo Alto Networks, Inc. All rights reserved.