set vsys
set vsys <name>
set vsys <name> display-name <value>
set vsys <name> setting
set vsys <name> setting nat
set vsys <name> setting nat reserve-ip <yes|no>
set vsys <name> setting nat reserve-time <1-604800>
set vsys <name> setting ssl-decrypt
set vsys <name> setting ssl-decrypt allow-forward-decrypted-content <yes|no>
set vsys <name> setting ssl-decrypt url-wait <yes|no>
set vsys <name> setting ssl-decrypt url-proxy <yes|no>
set vsys <name> setting ssl-decrypt notify-user <yes|no>
set vsys <name> setting ssl-decrypt answer-timeout <1-86400>
set vsys <name> import
set vsys <name> import dns-proxy <value>
set vsys <name> import network
set vsys <name> import network interface  [ <interface1> <interface2>... ]
set vsys <name> import network virtual-wire  [ <virtual-wire1> <virtual-wire2>... ]
set vsys <name> import network vlan  [ <vlan1> <vlan2>... ]
set vsys <name> import network virtual-router  [ <virtual-router1> <virtual-router2>... ]
set vsys <name> import network logical-router  [ <logical-router1> <logical-router2>... ]
set vsys <name> import resource
set vsys <name> import resource max-sessions <1-4194290>
set vsys <name> import resource max-site-to-site-vpn-tunnels <0-10000>
set vsys <name> import resource max-concurrent-ssl-vpn-tunnels <0-65535>
set vsys <name> import resource max-security-rules <0-65000>
set vsys <name> import resource max-nat-rules <0-16000>
set vsys <name> import resource max-ssl-decryption-rules <0-5000>
set vsys <name> import resource max-qos-rules <0-8000>
set vsys <name> import resource max-application-override-rules <0-4000>
set vsys <name> import resource max-pbf-rules <0-2000>
set vsys <name> import resource max-auth-rules <0-8000>
set vsys <name> import resource max-dos-rules <0-2000>
set vsys <name> import resource max-sdwan-rules <0-2000>
set vsys <name> import visible-vsys  [ <visible-vsys1> <visible-vsys2>... ]
set vsys <name> route
set vsys <name> route service
set vsys <name> route service <name>
set vsys <name> route service <name> source
set vsys <name> route service <name> source interface <value>
set vsys <name> route service <name> source address <value>
set vsys <name> route service <name> source-v6
set vsys <name> route service <name> source-v6 interface <value>
set vsys <name> route service <name> source-v6 address <value>
set vsys <name> authentication-profile
set vsys <name> authentication-profile <name>
set vsys <name> authentication-profile <name> username-modifier <value>|<validate>|<%USERINPUT%|%USERINPUT%@%USERDOMAIN%|%USERDOMAIN%\%USERINPUT%>
set vsys <name> authentication-profile <name> user-domain <value>
set vsys <name> authentication-profile <name> single-sign-on
set vsys <name> authentication-profile <name> single-sign-on realm <value>
set vsys <name> authentication-profile <name> single-sign-on service-principal <value>
set vsys <name> authentication-profile <name> single-sign-on kerberos-keytab <value>
set vsys <name> authentication-profile <name> lockout
set vsys <name> authentication-profile <name> lockout failed-attempts <0-10>
set vsys <name> authentication-profile <name> lockout lockout-time <0-60>
set vsys <name> authentication-profile <name> allow-list  [ <allow-list1> <allow-list2>... ]
set vsys <name> authentication-profile <name> method
set vsys <name> authentication-profile <name> method none
set vsys <name> authentication-profile <name> method cloud
set vsys <name> authentication-profile <name> method cloud region
set vsys <name> authentication-profile <name> method cloud region region_id <value>
set vsys <name> authentication-profile <name> method cloud region tenant
set vsys <name> authentication-profile <name> method cloud region tenant tenant_id <value>
set vsys <name> authentication-profile <name> method cloud region tenant profile
set vsys <name> authentication-profile <name> method cloud region tenant profile profile_id <value>
set vsys <name> authentication-profile <name> method cloud region tenant profile mfa
set vsys <name> authentication-profile <name> method cloud region tenant profile mfa force-mfa <value>
set vsys <name> authentication-profile <name> method cloud clock-skew <1-900>
set vsys <name> authentication-profile <name> method local-database
set vsys <name> authentication-profile <name> method radius
set vsys <name> authentication-profile <name> method radius server-profile <value>
set vsys <name> authentication-profile <name> method radius checkgroup <yes|no>
set vsys <name> authentication-profile <name> method ldap
set vsys <name> authentication-profile <name> method ldap server-profile <value>
set vsys <name> authentication-profile <name> method ldap login-attribute <value>
set vsys <name> authentication-profile <name> method ldap passwd-exp-days <0-255>
set vsys <name> authentication-profile <name> method kerberos
set vsys <name> authentication-profile <name> method kerberos server-profile <value>
set vsys <name> authentication-profile <name> method kerberos realm <value>
set vsys <name> authentication-profile <name> method tacplus
set vsys <name> authentication-profile <name> method tacplus server-profile <value>
set vsys <name> authentication-profile <name> method tacplus checkgroup <yes|no>
set vsys <name> authentication-profile <name> method saml-idp
set vsys <name> authentication-profile <name> method saml-idp server-profile <value>
set vsys <name> authentication-profile <name> method saml-idp enable-single-logout <yes|no>
set vsys <name> authentication-profile <name> method saml-idp request-signing-certificate <value>
set vsys <name> authentication-profile <name> method saml-idp certificate-profile <value>
set vsys <name> authentication-profile <name> method saml-idp attribute-name-username <value>
set vsys <name> authentication-profile <name> method saml-idp attribute-name-usergroup <value>
set vsys <name> authentication-profile <name> method saml-idp attribute-name-admin-role <value>
set vsys <name> authentication-profile <name> method saml-idp attribute-name-access-domain <value>
set vsys <name> authentication-profile <name> multi-factor-auth
set vsys <name> authentication-profile <name> multi-factor-auth mfa-enable <yes|no>
set vsys <name> authentication-profile <name> multi-factor-auth factors  [ <factors1> <factors2>... ]
set vsys <name> authentication-sequence
set vsys <name> authentication-sequence <name>
set vsys <name> authentication-sequence <name> use-domain-find-profile <yes|no>
set vsys <name> authentication-sequence <name> authentication-profiles  [ <authentication-profiles1> <authentication-profiles2>... ]
set vsys <name> certificate-profile
set vsys <name> certificate-profile <name>
set vsys <name> certificate-profile <name> username-field
set vsys <name> certificate-profile <name> username-field subject <common-name>
set vsys <name> certificate-profile <name> username-field subject-alt <email|principal-name>
set vsys <name> certificate-profile <name> domain <value>
set vsys <name> certificate-profile <name> CA
set vsys <name> certificate-profile <name> CA <name>
set vsys <name> certificate-profile <name> CA <name> default-ocsp-url <value>
set vsys <name> certificate-profile <name> CA <name> ocsp-verify-cert <value>
set vsys <name> certificate-profile <name> CA <name> template-name <value>
set vsys <name> certificate-profile <name> use-crl <yes|no>
set vsys <name> certificate-profile <name> use-ocsp <yes|no>
set vsys <name> certificate-profile <name> crl-receive-timeout <1-60>
set vsys <name> certificate-profile <name> ocsp-receive-timeout <1-60>
set vsys <name> certificate-profile <name> ocsp-exclude-nonce <yes|no>
set vsys <name> certificate-profile <name> cert-status-timeout <0-60>
set vsys <name> certificate-profile <name> block-unknown-cert <yes|no>
set vsys <name> certificate-profile <name> block-timeout-cert <yes|no>
set vsys <name> certificate-profile <name> block-unauthenticated-cert <yes|no>
set vsys <name> certificate-profile <name> block-expired-cert <yes|no>
set vsys <name> server-profile
set vsys <name> server-profile ldap
set vsys <name> server-profile ldap <name>
set vsys <name> server-profile ldap <name> ldap-type <active-directory|e-directory|sun|other>
set vsys <name> server-profile ldap <name> server
set vsys <name> server-profile ldap <name> server <name>
set vsys <name> server-profile ldap <name> server <name> address <ip/netmask>|<value>
set vsys <name> server-profile ldap <name> server <name> port <1-65535>
set vsys <name> server-profile ldap <name> ssl <yes|no>
set vsys <name> server-profile ldap <name> ssl <yes>
set vsys <name> server-profile ldap <name> verify-server-certificate <yes|no>
set vsys <name> server-profile ldap <name> disabled <yes|no>
set vsys <name> server-profile ldap <name> base <value>
set vsys <name> server-profile ldap <name> bind-dn <value>
set vsys <name> server-profile ldap <name> bind-password <value>
set vsys <name> server-profile ldap <name> timelimit <1-30>
set vsys <name> server-profile ldap <name> bind-timelimit <1-60>
set vsys <name> server-profile ldap <name> retry-interval <60-3600>
set vsys <name> server-profile radius
set vsys <name> server-profile radius <name>
set vsys <name> server-profile radius <name> timeout <1-120>
set vsys <name> server-profile radius <name> retries <1-5>
set vsys <name> server-profile radius <name> protocol
set vsys <name> server-profile radius <name> protocol CHAP
set vsys <name> server-profile radius <name> protocol PAP
set vsys <name> server-profile radius <name> protocol PEAP-MSCHAPv2
set vsys <name> server-profile radius <name> protocol PEAP-MSCHAPv2 anon-outer-id <yes|no>
set vsys <name> server-profile radius <name> protocol PEAP-MSCHAPv2 allow-pwd-change <yes|no>
set vsys <name> server-profile radius <name> protocol PEAP-MSCHAPv2 radius-cert-profile <value>
set vsys <name> server-profile radius <name> protocol PEAP-with-GTC
set vsys <name> server-profile radius <name> protocol PEAP-with-GTC anon-outer-id <yes|no>
set vsys <name> server-profile radius <name> protocol PEAP-with-GTC radius-cert-profile <value>
set vsys <name> server-profile radius <name> protocol EAP-TTLS-with-PAP
set vsys <name> server-profile radius <name> protocol EAP-TTLS-with-PAP anon-outer-id <yes|no>
set vsys <name> server-profile radius <name> protocol EAP-TTLS-with-PAP radius-cert-profile <value>
set vsys <name> server-profile radius <name> server
set vsys <name> server-profile radius <name> server <name>
set vsys <name> server-profile radius <name> server <name> ip-address <ip/netmask>|<value>
set vsys <name> server-profile radius <name> server <name> secret <value>
set vsys <name> server-profile radius <name> server <name> port <1-65535>
set vsys <name> server-profile kerberos
set vsys <name> server-profile kerberos <name>
set vsys <name> server-profile kerberos <name> server
set vsys <name> server-profile kerberos <name> server <name>
set vsys <name> server-profile kerberos <name> server <name> host <ip/netmask>|<value>
set vsys <name> server-profile kerberos <name> server <name> port <1-65535>
set vsys <name> server-profile tacplus
set vsys <name> server-profile tacplus <name>
set vsys <name> server-profile tacplus <name> timeout <1-30>
set vsys <name> server-profile tacplus <name> use-single-connection <yes|no>
set vsys <name> server-profile tacplus <name> protocol <CHAP|PAP>
set vsys <name> server-profile tacplus <name> server
set vsys <name> server-profile tacplus <name> server <name>
set vsys <name> server-profile tacplus <name> server <name> address <ip/netmask>|<value>
set vsys <name> server-profile tacplus <name> server <name> secret <value>
set vsys <name> server-profile tacplus <name> server <name> port <1-65535>
set vsys <name> server-profile saml-idp
set vsys <name> server-profile saml-idp <name>
set vsys <name> server-profile saml-idp <name> entity-id <value>
set vsys <name> server-profile saml-idp <name> certificate <value>
set vsys <name> server-profile saml-idp <name> sso-url <value>
set vsys <name> server-profile saml-idp <name> sso-bindings <post|redirect>
set vsys <name> server-profile saml-idp <name> slo-url <value>
set vsys <name> server-profile saml-idp <name> slo-bindings <post|redirect>
set vsys <name> server-profile saml-idp <name> validate-idp-certificate <yes|no>
set vsys <name> server-profile saml-idp <name> want-auth-requests-signed <yes|no>
set vsys <name> server-profile saml-idp <name> max-clock-skew <1-900>
set vsys <name> server-profile netflow
set vsys <name> server-profile netflow <name>
set vsys <name> server-profile netflow <name> template-refresh-rate
set vsys <name> server-profile netflow <name> template-refresh-rate minutes <1-3600>
set vsys <name> server-profile netflow <name> template-refresh-rate packets <1-600>
set vsys <name> server-profile netflow <name> active-timeout <1-60>
set vsys <name> server-profile netflow <name> export-enterprise-fields <yes|no>
set vsys <name> server-profile netflow <name> server
set vsys <name> server-profile netflow <name> server <name>
set vsys <name> server-profile netflow <name> server <name> host <ip/netmask>|<value>
set vsys <name> server-profile netflow <name> server <name> port <1-65535>
set vsys <name> server-profile dns
set vsys <name> server-profile dns <name>
set vsys <name> server-profile dns <name> inheritance
set vsys <name> server-profile dns <name> inheritance source <value>
set vsys <name> server-profile dns <name> primary <validate>|<ip/netmask>|<inherited>
set vsys <name> server-profile dns <name> secondary <validate>|<ip/netmask>|<inherited>
set vsys <name> server-profile dns <name> source
set vsys <name> server-profile dns <name> source interface <value>
set vsys <name> server-profile dns <name> source address <value>
set vsys <name> server-profile dns <name> source-v6
set vsys <name> server-profile dns <name> source-v6 interface <value>
set vsys <name> server-profile dns <name> source-v6 address <value>
set vsys <name> server-profile mfa-server-profile
set vsys <name> server-profile mfa-server-profile <name>
set vsys <name> server-profile mfa-server-profile <name> mfa-vendor-type <value>
set vsys <name> server-profile mfa-server-profile <name> mfa-cert-profile <value>
set vsys <name> server-profile mfa-server-profile <name> mfa-config
set vsys <name> server-profile mfa-server-profile <name> mfa-config <name>
set vsys <name> server-profile mfa-server-profile <name> mfa-config <name> value <value>
set vsys <name> dns-proxy
set vsys <name> dns-proxy <name>
set vsys <name> dns-proxy <name> enabled <yes|no>
set vsys <name> dns-proxy <name> interface  [ <interface1> <interface2>... ]
set vsys <name> dns-proxy <name> server-profile <value>
set vsys <name> dns-proxy <name> domain-servers
set vsys <name> dns-proxy <name> domain-servers <name>
set vsys <name> dns-proxy <name> domain-servers <name> cacheable <yes|no>
set vsys <name> dns-proxy <name> domain-servers <name> domain-name  [ <domain-name1> <domain-name2>... ]
set vsys <name> dns-proxy <name> domain-servers <name> server-profile <value>
set vsys <name> dns-proxy <name> cache
set vsys <name> dns-proxy <name> cache enabled <yes|no>
set vsys <name> dns-proxy <name> cache cache-edns <yes|no>
set vsys <name> dns-proxy <name> cache max-ttl
set vsys <name> dns-proxy <name> cache max-ttl enabled <yes|no>
set vsys <name> dns-proxy <name> cache max-ttl time-to-live <60-86400>
set vsys <name> dns-proxy <name> static-entries
set vsys <name> dns-proxy <name> static-entries <name>
set vsys <name> dns-proxy <name> static-entries <name> domain <value>
set vsys <name> dns-proxy <name> static-entries <name> address  [ <address1> <address2>... ]
set vsys <name> dns-proxy <name> tcp-queries
set vsys <name> dns-proxy <name> tcp-queries enabled <yes|no>
set vsys <name> dns-proxy <name> tcp-queries max-pending-requests <64-256>
set vsys <name> dns-proxy <name> udp-queries
set vsys <name> dns-proxy <name> udp-queries retries
set vsys <name> dns-proxy <name> udp-queries retries interval <1-30>
set vsys <name> dns-proxy <name> udp-queries retries attempts <1-30>
set vsys <name> log-settings
set vsys <name> log-settings snmptrap
set vsys <name> log-settings snmptrap <name>
set vsys <name> log-settings snmptrap <name> version
set vsys <name> log-settings snmptrap <name> version v2c
set vsys <name> log-settings snmptrap <name> version v2c server
set vsys <name> log-settings snmptrap <name> version v2c server <name>
set vsys <name> log-settings snmptrap <name> version v2c server <name> manager <ip/netmask>|<value>
set vsys <name> log-settings snmptrap <name> version v2c server <name> community <value>
set vsys <name> log-settings snmptrap <name> version v3
set vsys <name> log-settings snmptrap <name> version v3 server
set vsys <name> log-settings snmptrap <name> version v3 server <name>
set vsys <name> log-settings snmptrap <name> version v3 server <name> manager <ip/netmask>|<value>
set vsys <name> log-settings snmptrap <name> version v3 server <name> user <value>
set vsys <name> log-settings snmptrap <name> version v3 server <name> engineid <value>
set vsys <name> log-settings snmptrap <name> version v3 server <name> authpwd <value>
set vsys <name> log-settings snmptrap <name> version v3 server <name> privpwd <value>
set vsys <name> log-settings snmptrap <name> version v3 server <name> authproto <SHA|SHA-224|SHA-256|SHA-384|SHA-512>
set vsys <name> log-settings snmptrap <name> version v3 server <name> privproto <AES|AES-192|AES-256>
set vsys <name> log-settings email
set vsys <name> log-settings email <name>
set vsys <name> log-settings email <name> server
set vsys <name> log-settings email <name> server <name>
set vsys <name> log-settings email <name> server <name> display-name <value>
set vsys <name> log-settings email <name> server <name> from <value>
set vsys <name> log-settings email <name> server <name> to <value>
set vsys <name> log-settings email <name> server <name> and-also-to <value>
set vsys <name> log-settings email <name> server <name> gateway <value>
set vsys <name> log-settings email <name> server <name> protocol <SMTP|TLS>
set vsys <name> log-settings email <name> server <name> port <1-65535>
set vsys <name> log-settings email <name> server <name> tls-version <1.2|1.1>
set vsys <name> log-settings email <name> server <name> auth <Auto|Login|Plain>
set vsys <name> log-settings email <name> server <name> certificate-profile <value>
set vsys <name> log-settings email <name> server <name> username <value>
set vsys <name> log-settings email <name> server <name> password <value>
set vsys <name> log-settings email <name> format
set vsys <name> log-settings email <name> format traffic <value>
set vsys <name> log-settings email <name> format threat <value>
set vsys <name> log-settings email <name> format wildfire <value>
set vsys <name> log-settings email <name> format url <value>
set vsys <name> log-settings email <name> format data <value>
set vsys <name> log-settings email <name> format tunnel <value>
set vsys <name> log-settings email <name> format auth <value>
set vsys <name> log-settings email <name> format userid <value>
set vsys <name> log-settings email <name> format iptag <value>
set vsys <name> log-settings email <name> format decryption <value>
set vsys <name> log-settings email <name> format config <value>
set vsys <name> log-settings email <name> format system <value>
set vsys <name> log-settings email <name> format hip-match <value>
set vsys <name> log-settings email <name> format correlation <value>
set vsys <name> log-settings email <name> format escaping
set vsys <name> log-settings email <name> format escaping escaped-characters <value>
set vsys <name> log-settings email <name> format escaping escape-character <value>
set vsys <name> log-settings syslog
set vsys <name> log-settings syslog <name>
set vsys <name> log-settings syslog <name> server
set vsys <name> log-settings syslog <name> server <name>
set vsys <name> log-settings syslog <name> server <name> server <value>
set vsys <name> log-settings syslog <name> server <name> transport <UDP|TCP|SSL>
set vsys <name> log-settings syslog <name> server <name> port <1-65535>
set vsys <name> log-settings syslog <name> server <name> format <BSD|IETF>
set vsys <name> log-settings syslog <name> server <name> facility <LOG_USER|LOG_LOCAL0|LOG_LOCAL1|LOG_LOCAL2|LOG_LOCAL3|LOG_LOCAL4|LOG_LOCAL5|LOG_LOCAL6|LOG_LOCAL7>
set vsys <name> log-settings syslog <name> format
set vsys <name> log-settings syslog <name> format traffic <value>
set vsys <name> log-settings syslog <name> format threat <value>
set vsys <name> log-settings syslog <name> format wildfire <value>
set vsys <name> log-settings syslog <name> format url <value>
set vsys <name> log-settings syslog <name> format data <value>
set vsys <name> log-settings syslog <name> format tunnel <value>
set vsys <name> log-settings syslog <name> format auth <value>
set vsys <name> log-settings syslog <name> format userid <value>
set vsys <name> log-settings syslog <name> format iptag <value>
set vsys <name> log-settings syslog <name> format decryption <value>
set vsys <name> log-settings syslog <name> format config <value>
set vsys <name> log-settings syslog <name> format system <value>
set vsys <name> log-settings syslog <name> format hip-match <value>
set vsys <name> log-settings syslog <name> format correlation <value>
set vsys <name> log-settings syslog <name> format escaping
set vsys <name> log-settings syslog <name> format escaping escaped-characters <value>
set vsys <name> log-settings syslog <name> format escaping escape-character <value>
set vsys <name> log-settings http
set vsys <name> log-settings http <name>
set vsys <name> log-settings http <name> tag-registration <yes|no>
set vsys <name> log-settings http <name> server
set vsys <name> log-settings http <name> server <name>
set vsys <name> log-settings http <name> server <name> address <value>
set vsys <name> log-settings http <name> server <name> protocol <HTTP|HTTPS>
set vsys <name> log-settings http <name> server <name> port <1-65535>
set vsys <name> log-settings http <name> server <name> tls-version <1.2|1.1|1.0>
set vsys <name> log-settings http <name> server <name> certificate-profile <value>
set vsys <name> log-settings http <name> server <name> http-method <value>
set vsys <name> log-settings http <name> server <name> username <value>
set vsys <name> log-settings http <name> server <name> password <value>
set vsys <name> log-settings http <name> format
set vsys <name> log-settings http <name> format config
set vsys <name> log-settings http <name> format config name <value>
set vsys <name> log-settings http <name> format config url-format <value>
set vsys <name> log-settings http <name> format config headers
set vsys <name> log-settings http <name> format config headers <name>
set vsys <name> log-settings http <name> format config headers <name> value <value>
set vsys <name> log-settings http <name> format config params
set vsys <name> log-settings http <name> format config params <name>
set vsys <name> log-settings http <name> format config params <name> value <value>
set vsys <name> log-settings http <name> format config payload <value>
set vsys <name> log-settings http <name> format system
set vsys <name> log-settings http <name> format system name <value>
set vsys <name> log-settings http <name> format system url-format <value>
set vsys <name> log-settings http <name> format system headers
set vsys <name> log-settings http <name> format system headers <name>
set vsys <name> log-settings http <name> format system headers <name> value <value>
set vsys <name> log-settings http <name> format system params
set vsys <name> log-settings http <name> format system params <name>
set vsys <name> log-settings http <name> format system params <name> value <value>
set vsys <name> log-settings http <name> format system payload <value>
set vsys <name> log-settings http <name> format traffic
set vsys <name> log-settings http <name> format traffic name <value>
set vsys <name> log-settings http <name> format traffic url-format <value>
set vsys <name> log-settings http <name> format traffic headers
set vsys <name> log-settings http <name> format traffic headers <name>
set vsys <name> log-settings http <name> format traffic headers <name> value <value>
set vsys <name> log-settings http <name> format traffic params
set vsys <name> log-settings http <name> format traffic params <name>
set vsys <name> log-settings http <name> format traffic params <name> value <value>
set vsys <name> log-settings http <name> format traffic payload <value>
set vsys <name> log-settings http <name> format threat
set vsys <name> log-settings http <name> format threat name <value>
set vsys <name> log-settings http <name> format threat url-format <value>
set vsys <name> log-settings http <name> format threat headers
set vsys <name> log-settings http <name> format threat headers <name>
set vsys <name> log-settings http <name> format threat headers <name> value <value>
set vsys <name> log-settings http <name> format threat params
set vsys <name> log-settings http <name> format threat params <name>
set vsys <name> log-settings http <name> format threat params <name> value <value>
set vsys <name> log-settings http <name> format threat payload <value>
set vsys <name> log-settings http <name> format wildfire
set vsys <name> log-settings http <name> format wildfire name <value>
set vsys <name> log-settings http <name> format wildfire url-format <value>
set vsys <name> log-settings http <name> format wildfire headers
set vsys <name> log-settings http <name> format wildfire headers <name>
set vsys <name> log-settings http <name> format wildfire headers <name> value <value>
set vsys <name> log-settings http <name> format wildfire params
set vsys <name> log-settings http <name> format wildfire params <name>
set vsys <name> log-settings http <name> format wildfire params <name> value <value>
set vsys <name> log-settings http <name> format wildfire payload <value>
set vsys <name> log-settings http <name> format url
set vsys <name> log-settings http <name> format url name <value>
set vsys <name> log-settings http <name> format url url-format <value>
set vsys <name> log-settings http <name> format url headers
set vsys <name> log-settings http <name> format url headers <name>
set vsys <name> log-settings http <name> format url headers <name> value <value>
set vsys <name> log-settings http <name> format url params
set vsys <name> log-settings http <name> format url params <name>
set vsys <name> log-settings http <name> format url params <name> value <value>
set vsys <name> log-settings http <name> format url payload <value>
set vsys <name> log-settings http <name> format data
set vsys <name> log-settings http <name> format data name <value>
set vsys <name> log-settings http <name> format data url-format <value>
set vsys <name> log-settings http <name> format data headers
set vsys <name> log-settings http <name> format data headers <name>
set vsys <name> log-settings http <name> format data headers <name> value <value>
set vsys <name> log-settings http <name> format data params
set vsys <name> log-settings http <name> format data params <name>
set vsys <name> log-settings http <name> format data params <name> value <value>
set vsys <name> log-settings http <name> format data payload <value>
set vsys <name> log-settings http <name> format tunnel
set vsys <name> log-settings http <name> format tunnel name <value>
set vsys <name> log-settings http <name> format tunnel url-format <value>
set vsys <name> log-settings http <name> format tunnel headers
set vsys <name> log-settings http <name> format tunnel headers <name>
set vsys <name> log-settings http <name> format tunnel headers <name> value <value>
set vsys <name> log-settings http <name> format tunnel params
set vsys <name> log-settings http <name> format tunnel params <name>
set vsys <name> log-settings http <name> format tunnel params <name> value <value>
set vsys <name> log-settings http <name> format tunnel payload <value>
set vsys <name> log-settings http <name> format auth
set vsys <name> log-settings http <name> format auth name <value>
set vsys <name> log-settings http <name> format auth url-format <value>
set vsys <name> log-settings http <name> format auth headers
set vsys <name> log-settings http <name> format auth headers <name>
set vsys <name> log-settings http <name> format auth headers <name> value <value>
set vsys <name> log-settings http <name> format auth params
set vsys <name> log-settings http <name> format auth params <name>
set vsys <name> log-settings http <name> format auth params <name> value <value>
set vsys <name> log-settings http <name> format auth payload <value>
set vsys <name> log-settings http <name> format userid
set vsys <name> log-settings http <name> format userid name <value>
set vsys <name> log-settings http <name> format userid url-format <value>
set vsys <name> log-settings http <name> format userid headers
set vsys <name> log-settings http <name> format userid headers <name>
set vsys <name> log-settings http <name> format userid headers <name> value <value>
set vsys <name> log-settings http <name> format userid params
set vsys <name> log-settings http <name> format userid params <name>
set vsys <name> log-settings http <name> format userid params <name> value <value>
set vsys <name> log-settings http <name> format userid payload <value>
set vsys <name> log-settings http <name> format iptag
set vsys <name> log-settings http <name> format iptag name <value>
set vsys <name> log-settings http <name> format iptag url-format <value>
set vsys <name> log-settings http <name> format iptag headers
set vsys <name> log-settings http <name> format iptag headers <name>
set vsys <name> log-settings http <name> format iptag headers <name> value <value>
set vsys <name> log-settings http <name> format iptag params
set vsys <name> log-settings http <name> format iptag params <name>
set vsys <name> log-settings http <name> format iptag params <name> value <value>
set vsys <name> log-settings http <name> format iptag payload <value>
set vsys <name> log-settings http <name> format decryption
set vsys <name> log-settings http <name> format decryption name <value>
set vsys <name> log-settings http <name> format decryption url-format <value>
set vsys <name> log-settings http <name> format decryption headers
set vsys <name> log-settings http <name> format decryption headers <name>
set vsys <name> log-settings http <name> format decryption headers <name> value <value>
set vsys <name> log-settings http <name> format decryption params
set vsys <name> log-settings http <name> format decryption params <name>
set vsys <name> log-settings http <name> format decryption params <name> value <value>
set vsys <name> log-settings http <name> format decryption payload <value>
set vsys <name> log-settings http <name> format hip-match
set vsys <name> log-settings http <name> format hip-match name <value>
set vsys <name> log-settings http <name> format hip-match url-format <value>
set vsys <name> log-settings http <name> format hip-match headers
set vsys <name> log-settings http <name> format hip-match headers <name>
set vsys <name> log-settings http <name> format hip-match headers <name> value <value>
set vsys <name> log-settings http <name> format hip-match params
set vsys <name> log-settings http <name> format hip-match params <name>
set vsys <name> log-settings http <name> format hip-match params <name> value <value>
set vsys <name> log-settings http <name> format hip-match payload <value>
set vsys <name> log-settings http <name> format correlation
set vsys <name> log-settings http <name> format correlation name <value>
set vsys <name> log-settings http <name> format correlation url-format <value>
set vsys <name> log-settings http <name> format correlation headers
set vsys <name> log-settings http <name> format correlation headers <name>
set vsys <name> log-settings http <name> format correlation headers <name> value <value>
set vsys <name> log-settings http <name> format correlation params
set vsys <name> log-settings http <name> format correlation params <name>
set vsys <name> log-settings http <name> format correlation params <name> value <value>
set vsys <name> log-settings http <name> format correlation payload <value>
set vsys <name> log-settings profiles
set vsys <name> log-settings profiles <name>
set vsys <name> log-settings profiles <name> description <value>
set vsys <name> log-settings profiles <name> enhanced-application-logging <yes|no>
set vsys <name> log-settings profiles <name> match-list
set vsys <name> log-settings profiles <name> match-list <name>
set vsys <name> log-settings profiles <name> match-list <name> action-desc <value>
set vsys <name> log-settings profiles <name> match-list <name> log-type <traffic|threat|wildfire|url|data|tunnel|auth|decryption>
set vsys <name> log-settings profiles <name> match-list <name> filter <value>
set vsys <name> log-settings profiles <name> match-list <name> send-to-panorama <yes|no>
set vsys <name> log-settings profiles <name> match-list <name> send-snmptrap  [ <send-snmptrap1> <send-snmptrap2>... ]
set vsys <name> log-settings profiles <name> match-list <name> send-email  [ <send-email1> <send-email2>... ]
set vsys <name> log-settings profiles <name> match-list <name> send-syslog  [ <send-syslog1> <send-syslog2>... ]
set vsys <name> log-settings profiles <name> match-list <name> send-http  [ <send-http1> <send-http2>... ]
set vsys <name> log-settings profiles <name> match-list <name> quarantine <yes|no>
set vsys <name> log-settings profiles <name> match-list <name> actions
set vsys <name> log-settings profiles <name> match-list <name> actions <name>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging target <source-address|destination-address|xff-address|user>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging action <add-tag|remove-tag>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging registration
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging registration localhost
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging registration panorama
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging registration remote
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging registration remote http-profile <value>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging timeout <0-43200>
set vsys <name> log-settings profiles <name> match-list <name> actions <name> type tagging tags  [ <tags1> <tags2>... ]
set vsys <name> certificate
set vsys <name> certificate <name>
set vsys <name> certificate <name> common-name <value>
set vsys <name> certificate <name> algorithm <value>
set vsys <name> certificate <name> not-valid-after <value>
set vsys <name> certificate <name> not-valid-before <value>
set vsys <name> certificate <name> expiry-epoch <value>
set vsys <name> certificate <name> subject <value>
set vsys <name> certificate <name> subject-hash <value>
set vsys <name> certificate <name> issuer <value>
set vsys <name> certificate <name> issuer-hash <value>
set vsys <name> certificate <name> csr <value>
set vsys <name> certificate <name> public-key <value>
set vsys <name> certificate <name> private-key <value>
set vsys <name> certificate <name> private-key-on-hsm <yes|no>
set vsys <name> certificate <name> status <valid|revoked>
set vsys <name> certificate <name> revoke-date-epoch <value>
set vsys <name> ssl-tls-service-profile
set vsys <name> ssl-tls-service-profile <name>
set vsys <name> ssl-tls-service-profile <name> certificate <value>
set vsys <name> ssl-tls-service-profile <name> protocol-settings
set vsys <name> ssl-tls-service-profile <name> protocol-settings min-version <tls1-0|tls1-1|tls1-2>
set vsys <name> ssl-tls-service-profile <name> protocol-settings max-version <tls1-0|tls1-1|tls1-2|max>
set vsys <name> ssl-tls-service-profile <name> protocol-settings keyxchg-algo-rsa <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings keyxchg-algo-dhe <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings keyxchg-algo-ecdhe <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-3des <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-rc4 <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-aes-128-cbc <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-aes-256-cbc <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-aes-128-gcm <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings enc-algo-aes-256-gcm <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings auth-algo-sha1 <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings auth-algo-sha256 <yes|no>
set vsys <name> ssl-tls-service-profile <name> protocol-settings auth-algo-sha384 <yes|no>
set vsys <name> response-page
set vsys <name> response-page application-block-page <value>
set vsys <name> response-page captive-portal-text <value>
set vsys <name> response-page file-block-continue-page <value>
set vsys <name> response-page file-block-page <value>
set vsys <name> response-page ssl-cert-status-page <value>
set vsys <name> response-page ssl-optout-text <value>
set vsys <name> response-page url-block-page <value>
set vsys <name> response-page url-coach-text <value>
set vsys <name> response-page credential-block-page <value>
set vsys <name> response-page credential-coach-text <value>
set vsys <name> response-page virus-block-page <value>
set vsys <name> response-page data-filter-block-page <value>
set vsys <name> response-page safe-search-block-page <value>
set vsys <name> response-page saml-auth-internal-error-page <value>
set vsys <name> response-page mfa-login-page <value>
set vsys <name> response-page global-protect-portal-custom-login-page
set vsys <name> response-page global-protect-portal-custom-login-page <name>
set vsys <name> response-page global-protect-portal-custom-login-page <name> page <value>
set vsys <name> response-page global-protect-portal-custom-home-page
set vsys <name> response-page global-protect-portal-custom-home-page <name>
set vsys <name> response-page global-protect-portal-custom-home-page <name> page <value>
set vsys <name> response-page global-protect-portal-custom-help-page
set vsys <name> response-page global-protect-portal-custom-help-page <name>
set vsys <name> response-page global-protect-portal-custom-help-page <name> page <value>
set vsys <name> response-page global-protect-portal-custom-welcome-page
set vsys <name> response-page global-protect-portal-custom-welcome-page <name>
set vsys <name> response-page global-protect-portal-custom-welcome-page <name> page <value>
set vsys <name> local-user-database
set vsys <name> local-user-database user
set vsys <name> local-user-database user <name>
set vsys <name> local-user-database user <name> phash <value>
set vsys <name> local-user-database user <name> disabled <yes|no>
set vsys <name> local-user-database user-group
set vsys <name> local-user-database user-group <name>
set vsys <name> local-user-database user-group <name> user  [ <user1> <user2>... ]
set vsys <name> ssl-decrypt
set vsys <name> ssl-decrypt forward-trust-certificate
set vsys <name> ssl-decrypt forward-trust-certificate rsa <value>
set vsys <name> ssl-decrypt forward-trust-certificate ecdsa <value>
set vsys <name> ssl-decrypt forward-untrust-certificate
set vsys <name> ssl-decrypt forward-untrust-certificate rsa <value>
set vsys <name> ssl-decrypt forward-untrust-certificate ecdsa <value>
set vsys <name> ssl-decrypt ssl-exclude-cert
set vsys <name> ssl-decrypt ssl-exclude-cert <name>
set vsys <name> ssl-decrypt ssl-exclude-cert <name> description <value>
set vsys <name> ssl-decrypt ssl-exclude-cert <name> exclude <yes|no>
set vsys <name> ssl-decrypt root-ca-exclude-list  [ <root-ca-exclude-list1> <root-ca-exclude-list2>... ]
set vsys <name> ssl-decrypt trusted-root-CA  [ <trusted-root-CA1> <trusted-root-CA2>... ]
set vsys <name> ocsp-responder
set vsys <name> ocsp-responder <name>
set vsys <name> ocsp-responder <name> host-name <value>
set vsys <name> scep
set vsys <name> scep <name>
set vsys <name> scep <name> scep-challenge
set vsys <name> scep <name> scep-challenge none
set vsys <name> scep <name> scep-challenge fixed <value>
set vsys <name> scep <name> scep-challenge dynamic
set vsys <name> scep <name> scep-challenge dynamic otp-server-url <value>
set vsys <name> scep <name> scep-challenge dynamic username <value>
set vsys <name> scep <name> scep-challenge dynamic password <value>
set vsys <name> scep <name> scep-url <value>
set vsys <name> scep <name> scep-ca-cert <value>
set vsys <name> scep <name> scep-client-cert <value>
set vsys <name> scep <name> ca-identity-name <value>
set vsys <name> scep <name> subject <value>
set vsys <name> scep <name> algorithm
set vsys <name> scep <name> algorithm rsa
set vsys <name> scep <name> algorithm rsa rsa-nbits <value>
set vsys <name> scep <name> digest <value>
set vsys <name> scep <name> fingerprint <value>
set vsys <name> scep <name> certificate-attributes
set vsys <name> scep <name> certificate-attributes rfc822name <value>
set vsys <name> scep <name> certificate-attributes dnsname <value>
set vsys <name> scep <name> certificate-attributes uniform-resource-identifier <value>
set vsys <name> scep <name> use-as-digital-signature <yes|no>
set vsys <name> scep <name> use-for-key-encipherment <yes|no>
set vsys <name> url-content-types  [ <url-content-types1> <url-content-types2>... ]
set vsys <name> ts-agent
set vsys <name> ts-agent <name>
set vsys <name> ts-agent <name> host <ip/netmask>|<value>
set vsys <name> ts-agent <name> port <1-65535>
set vsys <name> ts-agent <name> ip-list  [ <ip-list1> <ip-list2>... ]
set vsys <name> ts-agent <name> disabled <yes|no>
set vsys <name> redistribution-agent
set vsys <name> redistribution-agent <name>
set vsys <name> redistribution-agent <name> serial-number <value>
set vsys <name> redistribution-agent <name> host-port
set vsys <name> redistribution-agent <name> host-port host <ip/netmask>|<value>
set vsys <name> redistribution-agent <name> host-port ldap-proxy <yes|no>
set vsys <name> redistribution-agent <name> host-port port <1-65535>
set vsys <name> redistribution-agent <name> host-port collectorname <value>
set vsys <name> redistribution-agent <name> host-port secret <value>
set vsys <name> redistribution-agent <name> disabled <yes|no>
set vsys <name> redistribution-agent <name> ip-user-mappings <yes|no>
set vsys <name> redistribution-agent <name> ip-tags <yes|no>
set vsys <name> redistribution-agent <name> user-tags <yes|no>
set vsys <name> redistribution-agent <name> hip <yes|no>
set vsys <name> redistribution-agent <name> quarantine-list <yes|no>
set vsys <name> ipuser-include-exclude-list
set vsys <name> ipuser-include-exclude-list include-exclude-network
set vsys <name> ipuser-include-exclude-list include-exclude-network <name>
set vsys <name> ipuser-include-exclude-list include-exclude-network <name> disabled <yes|no>
set vsys <name> ipuser-include-exclude-list include-exclude-network <name> discovery <include|exclude>
set vsys <name> ipuser-include-exclude-list include-exclude-network <name> network-address <ip/netmask>
set vsys <name> iptag-include-exclude-list
set vsys <name> iptag-include-exclude-list include-exclude-network
set vsys <name> iptag-include-exclude-list include-exclude-network <name>
set vsys <name> iptag-include-exclude-list include-exclude-network <name> disabled <yes|no>
set vsys <name> iptag-include-exclude-list include-exclude-network <name> discovery <include|exclude>
set vsys <name> iptag-include-exclude-list include-exclude-network <name> network-address <ip/netmask>
set vsys <name> redistribution-collector
set vsys <name> redistribution-collector setting
set vsys <name> redistribution-collector setting collectorname <value>
set vsys <name> redistribution-collector setting secret <value>
set vsys <name> user-id-ssl-auth
set vsys <name> user-id-ssl-auth certificate-profile <value>
set vsys <name> vm-info-source
set vsys <name> vm-info-source <name>
set vsys <name> vm-info-source <name> AWS-VPC
set vsys <name> vm-info-source <name> AWS-VPC description <value>
set vsys <name> vm-info-source <name> AWS-VPC disabled <yes|no>
set vsys <name> vm-info-source <name> AWS-VPC source <value>
set vsys <name> vm-info-source <name> AWS-VPC access-key-id <value>
set vsys <name> vm-info-source <name> AWS-VPC secret-access-key <value>
set vsys <name> vm-info-source <name> AWS-VPC update-interval <60-1200>
set vsys <name> vm-info-source <name> AWS-VPC vm-info-timeout-enable <yes|no>
set vsys <name> vm-info-source <name> AWS-VPC vm-info-timeout <2-10>
set vsys <name> vm-info-source <name> AWS-VPC vpc-id <value>
set vsys <name> vm-info-source <name> Google-Compute-Engine
set vsys <name> vm-info-source <name> Google-Compute-Engine description <value>
set vsys <name> vm-info-source <name> Google-Compute-Engine disabled <yes|no>
set vsys <name> vm-info-source <name> Google-Compute-Engine service-auth-type
set vsys <name> vm-info-source <name> Google-Compute-Engine service-auth-type service-in-gce
set vsys <name> vm-info-source <name> Google-Compute-Engine service-auth-type service-account
set vsys <name> vm-info-source <name> Google-Compute-Engine service-auth-type service-account service-account-cred <value>
set vsys <name> vm-info-source <name> Google-Compute-Engine project-id <value>
set vsys <name> vm-info-source <name> Google-Compute-Engine zone-name <value>
set vsys <name> vm-info-source <name> Google-Compute-Engine update-interval <60-1200>
set vsys <name> vm-info-source <name> Google-Compute-Engine vm-info-timeout-enable <yes|no>
set vsys <name> vm-info-source <name> Google-Compute-Engine vm-info-timeout <2-10>
set vsys <name> vm-info-source <name> VMware-ESXi
set vsys <name> vm-info-source <name> VMware-ESXi description <value>
set vsys <name> vm-info-source <name> VMware-ESXi port <1-65535>
set vsys <name> vm-info-source <name> VMware-ESXi disabled <yes|no>
set vsys <name> vm-info-source <name> VMware-ESXi vm-info-timeout-enable <yes|no>
set vsys <name> vm-info-source <name> VMware-ESXi vm-info-timeout <2-10>
set vsys <name> vm-info-source <name> VMware-ESXi source <ip/netmask>|<value>
set vsys <name> vm-info-source <name> VMware-ESXi username <value>
set vsys <name> vm-info-source <name> VMware-ESXi password <value>
set vsys <name> vm-info-source <name> VMware-ESXi update-interval <5-600>
set vsys <name> vm-info-source <name> VMware-vCenter
set vsys <name> vm-info-source <name> VMware-vCenter description <value>
set vsys <name> vm-info-source <name> VMware-vCenter port <1-65535>
set vsys <name> vm-info-source <name> VMware-vCenter disabled <yes|no>
set vsys <name> vm-info-source <name> VMware-vCenter vm-info-timeout-enable <yes|no>
set vsys <name> vm-info-source <name> VMware-vCenter vm-info-timeout <2-10>
set vsys <name> vm-info-source <name> VMware-vCenter source <ip/netmask>|<value>
set vsys <name> vm-info-source <name> VMware-vCenter username <value>
set vsys <name> vm-info-source <name> VMware-vCenter password <value>
set vsys <name> vm-info-source <name> VMware-vCenter update-interval <5-600>
set vsys <name> group-mapping
set vsys <name> group-mapping <name>
set vsys <name> group-mapping <name> server-profile <value>
set vsys <name> group-mapping <name> disabled <yes|no>
set vsys <name> group-mapping <name> use-ldap-for-serialno-check <yes|no>
set vsys <name> group-mapping <name> use-modify-timestamp <yes|no>
set vsys <name> group-mapping <name> limited-group-search <yes|no>
set vsys <name> group-mapping <name> nested-group-level <1-20>
set vsys <name> group-mapping <name> group-filter <value>
set vsys <name> group-mapping <name> user-filter <value>
set vsys <name> group-mapping <name> domain <value>
set vsys <name> group-mapping <name> update-interval <60-86400>
set vsys <name> group-mapping <name> group-object  [ <group-object1> <group-object2>... ]
set vsys <name> group-mapping <name> group-member  [ <group-member1> <group-member2>... ]
set vsys <name> group-mapping <name> group-name  [ <group-name1> <group-name2>... ]
set vsys <name> group-mapping <name> user-object  [ <user-object1> <user-object2>... ]
set vsys <name> group-mapping <name> user-name  [ <user-name1> <user-name2>... ]
set vsys <name> group-mapping <name> user-email  [ <user-email1> <user-email2>... ]
set vsys <name> group-mapping <name> group-email  [ <group-email1> <group-email2>... ]
set vsys <name> group-mapping <name> alternate-user-name-1  [ <alternate-user-name-11> <alternate-user-name-12>... ]
set vsys <name> group-mapping <name> alternate-user-name-2  [ <alternate-user-name-21> <alternate-user-name-22>... ]
set vsys <name> group-mapping <name> alternate-user-name-3  [ <alternate-user-name-31> <alternate-user-name-32>... ]
set vsys <name> group-mapping <name> container-object  [ <container-object1> <container-object2>... ]
set vsys <name> group-mapping <name> last-modify-attr  [ <last-modify-attr1> <last-modify-attr2>... ]
set vsys <name> group-mapping <name> group-include-list  [ <group-include-list1> <group-include-list2>... ]
set vsys <name> group-mapping <name> custom-group
set vsys <name> group-mapping <name> custom-group <name>
set vsys <name> group-mapping <name> custom-group <name> ldap-filter <value>
set vsys <name> cloud-identity-engine
set vsys <name> cloud-identity-engine <name>
set vsys <name> cloud-identity-engine <name> region <value>
set vsys <name> cloud-identity-engine <name> cloud-identity-engine-instance <value>
set vsys <name> cloud-identity-engine <name> domain <value>
set vsys <name> cloud-identity-engine <name> update-interval <5-1440>
set vsys <name> cloud-identity-engine <name> enabled <yes|no>
set vsys <name> cloud-identity-engine <name> primary-user <value>
set vsys <name> cloud-identity-engine <name> user-email <value>
set vsys <name> cloud-identity-engine <name> alt-username-1 <value>
set vsys <name> cloud-identity-engine <name> alt-username-2 <value>
set vsys <name> cloud-identity-engine <name> alt-username-3 <value>
set vsys <name> cloud-identity-engine <name> group-name <value>
set vsys <name> cloud-identity-engine <name> group-email <value>
set vsys <name> cloud-identity-engine <name> endpoint-serial-number <value>
set vsys <name> captive-portal
set vsys <name> captive-portal enable-captive-portal <yes|no>
set vsys <name> captive-portal idle-timer <1-1440>
set vsys <name> captive-portal timer <1-1440>
set vsys <name> captive-portal redirect-host <ip/netmask>|<value>
set vsys <name> captive-portal ssl-tls-service-profile <value>
set vsys <name> captive-portal gp-udp-port <1-65535>
set vsys <name> captive-portal mode
set vsys <name> captive-portal mode transparent
set vsys <name> captive-portal mode redirect
set vsys <name> captive-portal mode redirect session-cookie
set vsys <name> captive-portal mode redirect session-cookie enable <yes|no>
set vsys <name> captive-portal mode redirect session-cookie timeout <60-10080>
set vsys <name> captive-portal mode redirect session-cookie roaming <yes|no>
set vsys <name> captive-portal authentication-profile <value>
set vsys <name> captive-portal certificate-profile <value>
set vsys <name> user-id-collector
set vsys <name> user-id-collector setting
set vsys <name> user-id-collector setting wmi-account <value>
set vsys <name> user-id-collector setting wmi-password <value>
set vsys <name> user-id-collector setting domain-name <value>
set vsys <name> user-id-collector setting server-profile <value>
set vsys <name> user-id-collector setting enable-security-log <yes|no>
set vsys <name> user-id-collector setting security-log-interval <1-3600>
set vsys <name> user-id-collector setting enable-session <yes|no>
set vsys <name> user-id-collector setting session-interval <1-3600>
set vsys <name> user-id-collector setting edirectory-query-interval <1-3600>
set vsys <name> user-id-collector setting enable-probing <yes|no>
set vsys <name> user-id-collector setting client-probing-interval <1-1440>
set vsys <name> user-id-collector setting enable-mapping-timeout <yes|no>
set vsys <name> user-id-collector setting ip-user-mapping-timeout <1-1440>
set vsys <name> user-id-collector setting enable-user-match <yes|no>
set vsys <name> user-id-collector setting syslog-service-profile <value>
set vsys <name> user-id-collector syslog-parse-profile
set vsys <name> user-id-collector syslog-parse-profile <name>
set vsys <name> user-id-collector syslog-parse-profile <name> description <value>
set vsys <name> user-id-collector syslog-parse-profile <name> regex-identifier
set vsys <name> user-id-collector syslog-parse-profile <name> regex-identifier event-regex <value>
set vsys <name> user-id-collector syslog-parse-profile <name> regex-identifier username-regex <value>
set vsys <name> user-id-collector syslog-parse-profile <name> regex-identifier address-regex <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier event-string <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier username-prefix <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier username-delimiter <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier address-prefix <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier address-delimiter <value>
set vsys <name> user-id-collector syslog-parse-profile <name> field-identifier address-per-log <1-3>
set vsys <name> user-id-collector server-monitor
set vsys <name> user-id-collector server-monitor <name>
set vsys <name> user-id-collector server-monitor <name> description <value>
set vsys <name> user-id-collector server-monitor <name> disabled <yes|no>
set vsys <name> user-id-collector server-monitor <name> active-directory
set vsys <name> user-id-collector server-monitor <name> active-directory type <WMI|WinRM-HTTP|WinRM-HTTPS>
set vsys <name> user-id-collector server-monitor <name> active-directory host <ip/netmask>|<value>
set vsys <name> user-id-collector server-monitor <name> exchange
set vsys <name> user-id-collector server-monitor <name> exchange type <WMI|WinRM-HTTP|WinRM-HTTPS>
set vsys <name> user-id-collector server-monitor <name> exchange host <ip/netmask>|<value>
set vsys <name> user-id-collector server-monitor <name> e-directory
set vsys <name> user-id-collector server-monitor <name> e-directory server-profile <value>
set vsys <name> user-id-collector server-monitor <name> syslog
set vsys <name> user-id-collector server-monitor <name> syslog address <ip/netmask>
set vsys <name> user-id-collector server-monitor <name> syslog connection-type <udp|ssl>
set vsys <name> user-id-collector server-monitor <name> syslog syslog-parse-profile
set vsys <name> user-id-collector server-monitor <name> syslog syslog-parse-profile <name>
set vsys <name> user-id-collector server-monitor <name> syslog syslog-parse-profile <name> event-type <login|logout>
set vsys <name> user-id-collector server-monitor <name> syslog default-domain-name <value>
set vsys <name> user-id-collector include-exclude-network
set vsys <name> user-id-collector include-exclude-network <name>
set vsys <name> user-id-collector include-exclude-network <name> disabled <yes|no>
set vsys <name> user-id-collector include-exclude-network <name> discovery <include|exclude>
set vsys <name> user-id-collector include-exclude-network <name> network-address <ip/netmask>
set vsys <name> user-id-collector include-exclude-network-sequence
set vsys <name> user-id-collector include-exclude-network-sequence include-exclude-network  [ <include-exclude-network1> <include-exclude-network2>... ]
set vsys <name> user-id-collector ignore-user  [ <ignore-user1> <ignore-user2>... ]
set vsys <name> url-admin-override
set vsys <name> url-admin-override password <value>
set vsys <name> url-admin-override ssl-tls-service-profile <value>
set vsys <name> url-admin-override mode
set vsys <name> url-admin-override mode transparent
set vsys <name> url-admin-override mode redirect
set vsys <name> url-admin-override mode redirect address <ip/netmask>|<value>
set vsys <name> zone
set vsys <name> zone <name>
set vsys <name> zone <name> enable-user-identification <yes|no>
set vsys <name> zone <name> enable-device-identification <yes|no>
set vsys <name> zone <name> network
set vsys <name> zone <name> network zone-protection-profile <value>
set vsys <name> zone <name> network enable-packet-buffer-protection <yes|no>
set vsys <name> zone <name> network log-setting <value>
set vsys <name> zone <name> network tap  [ <tap1> <tap2>... ]
set vsys <name> zone <name> network virtual-wire  [ <virtual-wire1> <virtual-wire2>... ]
set vsys <name> zone <name> network layer2  [ <layer21> <layer22>... ]
set vsys <name> zone <name> network layer3  [ <layer31> <layer32>... ]
set vsys <name> zone <name> network external  [ <external1> <external2>... ]
set vsys <name> zone <name> network tunnel
set vsys <name> zone <name> user-acl
set vsys <name> zone <name> user-acl include-list  [ <include-list1> <include-list2>... ]
set vsys <name> zone <name> user-acl exclude-list  [ <exclude-list1> <exclude-list2>... ]
set vsys <name> zone <name> device-acl
set vsys <name> zone <name> device-acl include-list  [ <include-list1> <include-list2>... ]
set vsys <name> zone <name> device-acl exclude-list  [ <exclude-list1> <exclude-list2>... ]
set vsys <name> sdwan-interface-profile
set vsys <name> sdwan-interface-profile <name>
set vsys <name> sdwan-interface-profile <name> link-tag <value>
set vsys <name> sdwan-interface-profile <name> link-type <ADSL/DSL|Cablemodem|Ethernet|Fiber|LTE/3G/4G/5G|MPLS|Microwave/Radio|Satellite|WiFi|Other>
set vsys <name> sdwan-interface-profile <name> vpn-data-tunnel-support <yes|no>
set vsys <name> sdwan-interface-profile <name> maximum-download <float>
set vsys <name> sdwan-interface-profile <name> maximum-upload <float>
set vsys <name> sdwan-interface-profile <name> error-correction <yes|no>
set vsys <name> sdwan-interface-profile <name> path-monitoring <Aggressive|Relaxed>
set vsys <name> sdwan-interface-profile <name> vpn-failover-metric <1-65535>
set vsys <name> sdwan-interface-profile <name> probe-frequency <1-5>
set vsys <name> sdwan-interface-profile <name> probe-idle-time <1-86400>
set vsys <name> sdwan-interface-profile <name> failback-hold-time <20-120>
set vsys <name> sdwan-interface-profile <name> comment <value>
set vsys <name> global-protect
set vsys <name> global-protect global-protect-portal
set vsys <name> global-protect global-protect-portal <name>
set vsys <name> global-protect global-protect-portal <name> portal-config
set vsys <name> global-protect global-protect-portal <name> portal-config local-address
set vsys <name> global-protect global-protect-portal <name> portal-config local-address ip-address-family <ipv4|ipv6|ipv4_ipv6>
set vsys <name> global-protect global-protect-portal <name> portal-config local-address interface <value>
set vsys <name> global-protect global-protect-portal <name> portal-config local-address ip
set vsys <name> global-protect global-protect-portal <name> portal-config local-address ip ipv4 <value>
set vsys <name> global-protect global-protect-portal <name> portal-config local-address ip ipv6 <value>
set vsys <name> global-protect global-protect-portal <name> portal-config local-address floating-ip
set vsys <name> global-protect global-protect-portal <name> portal-config local-address floating-ip ipv4 <value>
set vsys <name> global-protect global-protect-portal <name> portal-config local-address floating-ip ipv6 <value>
set vsys <name> global-protect global-protect-portal <name> portal-config ssl-tls-service-profile <value>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> os <value>|<Any|Browser|Satellite>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> authentication-profile <value>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> auto-retrieve-passcode <yes|no>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> username-label <value>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> password-label <value>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> authentication-message <value>
set vsys <name> global-protect global-protect-portal <name> portal-config client-auth <name> user-credential-or-client-cert-required <no|yes>
set vsys <name> global-protect global-protect-portal <name> portal-config certificate-profile <value>
set vsys <name> global-protect global-protect-portal <name> portal-config custom-login-page <value>
set vsys <name> global-protect global-protect-portal <name> portal-config custom-home-page <value>
set vsys <name> global-protect global-protect-portal <name> portal-config custom-help-page <value>
set vsys <name> global-protect global-protect-portal <name> portal-config log-success <yes|no>
set vsys <name> global-protect global-protect-portal <name> portal-config log-fail <yes|no>
set vsys <name> global-protect global-protect-portal <name> portal-config log-setting <value>
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection certificate-profile <value>
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks windows
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key <name>
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks windows registry-key <name> registry-value  [ <registry-value1> <registry-value2>... ]
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist <name>
set vsys <name> global-protect global-protect-portal <name> portal-config config-selection custom-checks mac-os plist <name> key  [ <key1> <key2>... ]
set vsys <name> global-protect global-protect-portal <name> clientless-vpn
set vsys <name> global-protect global-protect-portal <name> clientless-vpn hostname <value>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn security-zone <value>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn login-lifetime
set vsys <name> global-protect global-protect-portal <name> clientless-vpn login-lifetime minutes <60-1440>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn login-lifetime hours <1-24>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn inactivity-logout
set vsys <name> global-protect global-protect-portal <name> clientless-vpn inactivity-logout minutes <5-1440>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn inactivity-logout hours <1-24>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn max-user <1-30000>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn dns-proxy <value>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol min-version <sslv3|tls1-0|tls1-1|tls1-2>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol max-version <sslv3|tls1-0|tls1-1|tls1-2|max>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-rsa <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-dhe <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol keyxchg-algo-ecdhe <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-3des <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-rc4 <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-128-cbc <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-256-cbc <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-128-gcm <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol enc-algo-aes-256-gcm <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-md5 <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha1 <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha256 <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings ssl-protocol auth-algo-sha384 <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-expired-certificate <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-untrusted-issuer <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-unknown-cert <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn crypto-settings server-cert-verification block-timeout-cert <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn rewrite-exclude-domain-list  [ <rewrite-exclude-domain-list1> <rewrite-exclude-domain-list2>... ]
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> applications  [ <applications1> <applications2>... ]
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> enable-custom-app-URL-address-bar <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn apps-to-user-mapping <name> display-global-protect-agent-download-link <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> domains  [ <domains1> <domains2>... ]
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> use-proxy <yes|no>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server server <value>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server port <1-65535>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server user <value>
set vsys <name> global-protect global-protect-portal <name> clientless-vpn proxy-server-setting <name> proxy-server password <value>
set vsys <name> global-protect global-protect-portal <name> client-config
set vsys <name> global-protect global-protect-portal <name> client-config root-ca
set vsys <name> global-protect global-protect-portal <name> client-config root-ca <name>
set vsys <name> global-protect global-protect-portal <name> client-config root-ca <name> install-in-cert-store <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config agent-user-override-key <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs
set vsys <name> global-protect global-protect-portal <name> client-config configs <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> save-user-credentials <0|1|2|3>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> portal-2fa <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-gateway-2fa <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> auto-discovery-external-gateway-2fa <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> manual-only-gateway-2fa <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> certificate
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> certificate criteria
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> certificate criteria certificate-profile <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> default-value-data <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> negate <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name> value-data <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria registry-key <name> registry-value <name> negate <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> negate <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name> value <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> custom-checks criteria plist <name> key <name> negate <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno no
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> machine-account-exists-with-serialno yes
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> refresh-config <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> fqdn <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip ipv4 <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> ip ipv6 <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal list <name> source-ip  [ <source-ip1> <source-ip2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways internal dhcp-option-code  [ <dhcp-option-code1> <dhcp-option-code2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external cutoff-time <0-10>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> fqdn <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip ipv4 <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> ip ipv6 <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> priority-rule <name> priority <0|1|2|3|4|5>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gateways external list <name> manual <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection ip-address <ip/netmask>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection hostname <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6 ip-address <ip/netmask>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> internal-host-detection-v6 hostname <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui passcode <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui uninstall-password <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui agent-user-override-timeout <0-65535>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui max-agent-user-overrides <0-65535>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui welcome-page
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-ui welcome-page page <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection certificate-profile <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection exclusion category <name> vendor <name> product  [ <product1> <product2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows registry-key <name> registry-value  [ <registry-value1> <registry-value2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks windows process-list  [ <process-list1> <process-list2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os plist <name> key  [ <key1> <key2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks mac-os process-list  [ <process-list1> <process-list2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks linux
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection custom-checks linux process-list  [ <process-list1> <process-list2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection max-wait-time <10-60>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> hip-collection collect-hip-data <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> third-party-vpn-clients  [ <third-party-vpn-clients1> <third-party-vpn-clients2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> agent-config
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gp-app-config
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gp-app-config config
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gp-app-config config <name>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> gp-app-config config <name> value  [ <value1> <value2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> os  [ <os1> <os2>... ]
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> mdm-address <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> mdm-enrollment-port <443|7443|8443>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> client-certificate
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> client-certificate local <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> client-certificate scep <value>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override generate-cookie <yes|no>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-days <1-365>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-hours <1-72>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-minutes <1-59>
set vsys <name> global-protect global-protect-portal <name> client-config configs <name> authentication-override cookie-encrypt-decrypt-cert <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config
set vsys <name> global-protect global-protect-portal <name> satellite-config root-ca  [ <root-ca1> <root-ca2>... ]
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate local
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate local issuing-certificate <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate local ocsp-responder <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate local certificate-life-time <7-365>
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate local certificate-renewal-period <3-30>
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate scep
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate scep scep <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config client-certificate scep certificate-renewal-period <3-30>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> devices  [ <devices1> <devices2>... ]
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> fqdn <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip ipv4 <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ip ipv6 <value>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> ipv6-preferred <yes|no>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> gateways <name> priority <1-25>
set vsys <name> global-protect global-protect-portal <name> satellite-config configs <name> config-refresh-interval <1-48>
set vsys <name> global-protect global-protect-gateway
set vsys <name> global-protect global-protect-gateway <name>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel <value>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override generate-cookie <yes|no>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-days <1-365>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-hours <1-72>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override accept-cookie cookie-lifetime lifetime-in-minutes <1-59>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-override cookie-encrypt-decrypt-cert <value>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> os  [ <os1> <os2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address region  [ <region1> <region2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> source-address ip-address  [ <ip-address1> <ip-address2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> dns-server  [ <dns-server1> <dns-server2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> dns-suffix  [ <dns-suffix1> <dns-suffix2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> ip-pool  [ <ip-pool1> <ip-pool2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling access-route  [ <access-route1> <access-route2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-access-route  [ <exclude-access-route1> <exclude-access-route2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-applications  [ <include-applications1> <include-applications2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list <name>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling include-domains list <name> ports  [ <ports1> <ports2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-applications  [ <exclude-applications1> <exclude-applications2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list <name>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> split-tunneling exclude-domains list <name> ports  [ <ports1> <ports2>... ]
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> no-direct-access-to-local-network <yes|no>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> retrieve-framed-ip-address <yes|no>
set vsys <name> global-protect global-protect-gateway <name> remote-user-tunnel-configs <name> authentication-server-ip-pool  [ <authentication-server-ip-pool1> <authentication-server-ip-pool2>... ]
set vsys <name> global-protect global-protect-gateway <name> ssl-tls-service-profile <value>
set vsys <name> global-protect global-protect-gateway <name> client-auth
set vsys <name> global-protect global-protect-gateway <name> client-auth <name>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> os <value>|<Any|Satellite|X-Auth>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> authentication-profile <value>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> auto-retrieve-passcode <yes|no>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> username-label <value>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> password-label <value>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> authentication-message <value>
set vsys <name> global-protect global-protect-gateway <name> client-auth <name> user-credential-or-client-cert-required <no|yes>
set vsys <name> global-protect global-protect-gateway <name> certificate-profile <value>
set vsys <name> global-protect global-protect-gateway <name> satellite-tunnel <value>
set vsys <name> global-protect global-protect-gateway <name> tunnel-mode <yes|no>
set vsys <name> global-protect global-protect-gateway <name> local-address
set vsys <name> global-protect global-protect-gateway <name> local-address ip-address-family <ipv4|ipv6|ipv4_ipv6>
set vsys <name> global-protect global-protect-gateway <name> local-address interface <value>
set vsys <name> global-protect global-protect-gateway <name> local-address ip
set vsys <name> global-protect global-protect-gateway <name> local-address ip ipv4 <value>
set vsys <name> global-protect global-protect-gateway <name> local-address ip ipv6 <value>
set vsys <name> global-protect global-protect-gateway <name> local-address floating-ip
set vsys <name> global-protect global-protect-gateway <name> local-address floating-ip ipv4 <value>
set vsys <name> global-protect global-protect-gateway <name> local-address floating-ip ipv6 <value>
set vsys <name> global-protect global-protect-gateway <name> security-restrictions
set vsys <name> global-protect global-protect-gateway <name> security-restrictions disallow-automatic-restoration <yes|no>
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement enable <yes|no>
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement default
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom source-ipv4-netmask <0-32>
set vsys <name> global-protect global-protect-gateway <name> security-restrictions source-ip-enforcement custom source-ipv6-netmask <0-128>
set vsys <name> global-protect global-protect-gateway <name> block-quarantined-devices <yes|no>
set vsys <name> global-protect global-protect-gateway <name> roles
set vsys <name> global-protect global-protect-gateway <name> roles <name>
set vsys <name> global-protect global-protect-gateway <name> roles <name> login-lifetime
set vsys <name> global-protect global-protect-gateway <name> roles <name> login-lifetime minutes <120-43200>
set vsys <name> global-protect global-protect-gateway <name> roles <name> login-lifetime hours <2-720>
set vsys <name> global-protect global-protect-gateway <name> roles <name> login-lifetime days <1-30>
set vsys <name> global-protect global-protect-gateway <name> roles <name> inactivity-logout <5-43200>
set vsys <name> global-protect global-protect-gateway <name> hip-notification
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name>
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> match-message
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> match-message include-app-list <yes|no>
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> match-message show-notification-as <system-tray-balloon|pop-up-message>
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> match-message message <value>
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> not-match-message
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> not-match-message show-notification-as <system-tray-balloon|pop-up-message>
set vsys <name> global-protect global-protect-gateway <name> hip-notification <name> not-match-message message <value>
set vsys <name> global-protect global-protect-gateway <name> log-success <yes|no>
set vsys <name> global-protect global-protect-gateway <name> log-fail <yes|no>
set vsys <name> global-protect global-protect-gateway <name> log-setting <value>
set vsys <name> global-protect global-protect-mdm
set vsys <name> global-protect global-protect-mdm <name>
set vsys <name> global-protect global-protect-mdm <name> disabled <yes|no>
set vsys <name> global-protect global-protect-mdm <name> host <value>
set vsys <name> global-protect global-protect-mdm <name> port <1-65535>
set vsys <name> global-protect global-protect-mdm <name> root-ca  [ <root-ca1> <root-ca2>... ]
set vsys <name> global-protect global-protect-mdm <name> client-certificate <value>
set vsys <name> global-protect clientless-app
set vsys <name> global-protect clientless-app <name>
set vsys <name> global-protect clientless-app <name> application-home-url <value>
set vsys <name> global-protect clientless-app <name> description <value>
set vsys <name> global-protect clientless-app <name> app-icon <value>
set vsys <name> global-protect clientless-app-group
set vsys <name> global-protect clientless-app-group <name>
set vsys <name> global-protect clientless-app-group <name> members  [ <members1> <members2>... ]
set vsys <name> profiles
set vsys <name> profiles hip-objects
set vsys <name> profiles hip-objects <name>
set vsys <name> profiles hip-objects <name> description <value>
set vsys <name> profiles hip-objects <name> host-info
set vsys <name> profiles hip-objects <name> host-info criteria
set vsys <name> profiles hip-objects <name> host-info criteria domain
set vsys <name> profiles hip-objects <name> host-info criteria domain contains <value>
set vsys <name> profiles hip-objects <name> host-info criteria domain is <value>
set vsys <name> profiles hip-objects <name> host-info criteria domain is-not <value>
set vsys <name> profiles hip-objects <name> host-info criteria os
set vsys <name> profiles hip-objects <name> host-info criteria os contains
set vsys <name> profiles hip-objects <name> host-info criteria os contains Microsoft <value>
set vsys <name> profiles hip-objects <name> host-info criteria os contains Apple <value>
set vsys <name> profiles hip-objects <name> host-info criteria os contains Google <value>
set vsys <name> profiles hip-objects <name> host-info criteria os contains Linux <value>
set vsys <name> profiles hip-objects <name> host-info criteria os contains Other <value>
set vsys <name> profiles hip-objects <name> host-info criteria client-version
set vsys <name> profiles hip-objects <name> host-info criteria client-version contains <value>
set vsys <name> profiles hip-objects <name> host-info criteria client-version is <value>
set vsys <name> profiles hip-objects <name> host-info criteria client-version is-not <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-name
set vsys <name> profiles hip-objects <name> host-info criteria host-name contains <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-name is <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-name is-not <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-id
set vsys <name> profiles hip-objects <name> host-info criteria host-id contains <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-id is <value>
set vsys <name> profiles hip-objects <name> host-info criteria host-id is-not <value>
set vsys <name> profiles hip-objects <name> host-info criteria managed <no|yes>
set vsys <name> profiles hip-objects <name> host-info criteria serial-number
set vsys <name> profiles hip-objects <name> host-info criteria serial-number contains <value>
set vsys <name> profiles hip-objects <name> host-info criteria serial-number is <value>
set vsys <name> profiles hip-objects <name> host-info criteria serial-number is-not <value>
set vsys <name> profiles hip-objects <name> network-info
set vsys <name> profiles hip-objects <name> network-info criteria
set vsys <name> profiles hip-objects <name> network-info criteria network
set vsys <name> profiles hip-objects <name> network-info criteria network is
set vsys <name> profiles hip-objects <name> network-info criteria network is wifi
set vsys <name> profiles hip-objects <name> network-info criteria network is wifi ssid <value>
set vsys <name> profiles hip-objects <name> network-info criteria network is mobile
set vsys <name> profiles hip-objects <name> network-info criteria network is mobile carrier <value>
set vsys <name> profiles hip-objects <name> network-info criteria network is unknown
set vsys <name> profiles hip-objects <name> network-info criteria network is-not
set vsys <name> profiles hip-objects <name> network-info criteria network is-not wifi
set vsys <name> profiles hip-objects <name> network-info criteria network is-not wifi ssid <value>
set vsys <name> profiles hip-objects <name> network-info criteria network is-not mobile
set vsys <name> profiles hip-objects <name> network-info criteria network is-not mobile carrier <value>
set vsys <name> profiles hip-objects <name> network-info criteria network is-not ethernet
set vsys <name> profiles hip-objects <name> network-info criteria network is-not unknown
set vsys <name> profiles hip-objects <name> patch-management
set vsys <name> profiles hip-objects <name> patch-management criteria
set vsys <name> profiles hip-objects <name> patch-management criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> patch-management criteria is-enabled <no|yes|not-available>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity greater-equal <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity greater-than <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity is <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity is-not <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity less-equal <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches severity less-than <0-100000>
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches patches  [ <patches1> <patches2>... ]
set vsys <name> profiles hip-objects <name> patch-management criteria missing-patches check <has-any|has-none|has-all>
set vsys <name> profiles hip-objects <name> patch-management vendor
set vsys <name> profiles hip-objects <name> patch-management vendor <name>
set vsys <name> profiles hip-objects <name> patch-management vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> patch-management exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> data-loss-prevention
set vsys <name> profiles hip-objects <name> data-loss-prevention criteria
set vsys <name> profiles hip-objects <name> data-loss-prevention criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> data-loss-prevention criteria is-enabled <no|yes|not-available>
set vsys <name> profiles hip-objects <name> data-loss-prevention vendor
set vsys <name> profiles hip-objects <name> data-loss-prevention vendor <name>
set vsys <name> profiles hip-objects <name> data-loss-prevention vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> data-loss-prevention exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> firewall
set vsys <name> profiles hip-objects <name> firewall criteria
set vsys <name> profiles hip-objects <name> firewall criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> firewall criteria is-enabled <no|yes|not-available>
set vsys <name> profiles hip-objects <name> firewall vendor
set vsys <name> profiles hip-objects <name> firewall vendor <name>
set vsys <name> profiles hip-objects <name> firewall vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> firewall exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> anti-malware
set vsys <name> profiles hip-objects <name> anti-malware criteria
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version within
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version within days <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version within versions <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version not-within
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version not-within days <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria virdef-version not-within versions <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version greater-equal <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version greater-than <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version is <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version is-not <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version less-equal <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version less-than <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version contains <value>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version within
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version within versions <1-1>
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version not-within
set vsys <name> profiles hip-objects <name> anti-malware criteria product-version not-within versions <1-1>
set vsys <name> profiles hip-objects <name> anti-malware criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> anti-malware criteria real-time-protection <no|yes|not-available>
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time not-available
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time within
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time within days <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time within hours <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time not-within
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time not-within days <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware criteria last-scan-time not-within hours <1-65535>
set vsys <name> profiles hip-objects <name> anti-malware vendor
set vsys <name> profiles hip-objects <name> anti-malware vendor <name>
set vsys <name> profiles hip-objects <name> anti-malware vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> anti-malware exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> disk-backup
set vsys <name> profiles hip-objects <name> disk-backup criteria
set vsys <name> profiles hip-objects <name> disk-backup criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time not-available
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time within
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time within days <1-65535>
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time within hours <1-65535>
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time not-within
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time not-within days <1-65535>
set vsys <name> profiles hip-objects <name> disk-backup criteria last-backup-time not-within hours <1-65535>
set vsys <name> profiles hip-objects <name> disk-backup vendor
set vsys <name> profiles hip-objects <name> disk-backup vendor <name>
set vsys <name> profiles hip-objects <name> disk-backup vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> disk-backup exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> disk-encryption
set vsys <name> profiles hip-objects <name> disk-encryption criteria
set vsys <name> profiles hip-objects <name> disk-encryption criteria is-installed <yes|no>
set vsys <name> profiles hip-objects <name> disk-encryption criteria encrypted-locations
set vsys <name> profiles hip-objects <name> disk-encryption criteria encrypted-locations <name>
set vsys <name> profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state
set vsys <name> profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state is <encrypted|unencrypted|partial|unknown>
set vsys <name> profiles hip-objects <name> disk-encryption criteria encrypted-locations <name> encryption-state is-not <encrypted|unencrypted|partial|unknown>
set vsys <name> profiles hip-objects <name> disk-encryption vendor
set vsys <name> profiles hip-objects <name> disk-encryption vendor <name>
set vsys <name> profiles hip-objects <name> disk-encryption vendor <name> product  [ <product1> <product2>... ]
set vsys <name> profiles hip-objects <name> disk-encryption exclude-vendor <yes|no>
set vsys <name> profiles hip-objects <name> custom-checks
set vsys <name> profiles hip-objects <name> custom-checks criteria
set vsys <name> profiles hip-objects <name> custom-checks criteria process-list
set vsys <name> profiles hip-objects <name> custom-checks criteria process-list <name>
set vsys <name> profiles hip-objects <name> custom-checks criteria process-list <name> running <yes|no>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> default-value-data <value>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> negate <yes|no>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name> value-data <value>
set vsys <name> profiles hip-objects <name> custom-checks criteria registry-key <name> registry-value <name> negate <yes|no>
set vsys <name> profiles hip-objects <name> custom-checks criteria plist
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name>
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name> negate <yes|no>
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name> key
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name> key <name>
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name> key <name> value <value>
set vsys <name> profiles hip-objects <name> custom-checks criteria plist <name> key <name> negate <yes|no>
set vsys <name> profiles hip-objects <name> mobile-device
set vsys <name> profiles hip-objects <name> mobile-device criteria
set vsys <name> profiles hip-objects <name> mobile-device criteria jailbroken <no|yes>
set vsys <name> profiles hip-objects <name> mobile-device criteria disk-encrypted <no|yes>
set vsys <name> profiles hip-objects <name> mobile-device criteria passcode-set <no|yes>
set vsys <name> profiles hip-objects <name> mobile-device criteria last-checkin-time
set vsys <name> profiles hip-objects <name> mobile-device criteria last-checkin-time within
set vsys <name> profiles hip-objects <name> mobile-device criteria last-checkin-time within days <1-365>
set vsys <name> profiles hip-objects <name> mobile-device criteria last-checkin-time not-within
set vsys <name> profiles hip-objects <name> mobile-device criteria last-checkin-time not-within days <1-365>
set vsys <name> profiles hip-objects <name> mobile-device criteria imei
set vsys <name> profiles hip-objects <name> mobile-device criteria imei contains <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria imei is <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria imei is-not <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria model
set vsys <name> profiles hip-objects <name> mobile-device criteria model contains <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria model is <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria model is-not <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria phone-number
set vsys <name> profiles hip-objects <name> mobile-device criteria phone-number contains <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria phone-number is <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria phone-number is-not <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria tag
set vsys <name> profiles hip-objects <name> mobile-device criteria tag contains <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria tag is <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria tag is-not <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware no
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware yes
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name> package <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-malware yes excludes <name> hash <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications has-unmanaged-app <no|yes>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications includes
set vsys <name> profiles hip-objects <name> mobile-device criteria applications includes <name>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications includes <name> package <value>
set vsys <name> profiles hip-objects <name> mobile-device criteria applications includes <name> hash <value>
set vsys <name> profiles hip-objects <name> certificate
set vsys <name> profiles hip-objects <name> certificate criteria
set vsys <name> profiles hip-objects <name> certificate criteria certificate-profile <value>
set vsys <name> profiles hip-objects <name> certificate criteria certificate-attributes
set vsys <name> profiles hip-objects <name> certificate criteria certificate-attributes <name>
set vsys <name> profiles hip-objects <name> certificate criteria certificate-attributes <name> value <value>
set vsys <name> profiles virus
set vsys <name> profiles virus <name>
set vsys <name> profiles virus <name> description <value>
set vsys <name> profiles virus <name> packet-capture <yes|no>
set vsys <name> profiles virus <name> mlav-engine-filebased-enabled
set vsys <name> profiles virus <name> mlav-engine-filebased-enabled <name>
set vsys <name> profiles virus <name> mlav-engine-filebased-enabled <name> mlav-policy-action <enable|enable(alert-only)|disable>
set vsys <name> profiles virus <name> decoder
set vsys <name> profiles virus <name> decoder <name>
set vsys <name> profiles virus <name> decoder <name> action <default|allow|alert|drop|reset-client|reset-server|reset-both>
set vsys <name> profiles virus <name> decoder <name> wildfire-action <default|allow|alert|drop|reset-client|reset-server|reset-both>
set vsys <name> profiles virus <name> decoder <name> mlav-action <default|allow|alert|drop|reset-client|reset-server|reset-both>
set vsys <name> profiles virus <name> application
set vsys <name> profiles virus <name> application <name>
set vsys <name> profiles virus <name> application <name> action <default|allow|alert|drop|reset-client|reset-server|reset-both>
set vsys <name> profiles virus <name> threat-exception
set vsys <name> profiles virus <name> threat-exception <name>
set vsys <name> profiles virus <name> mlav-exception
set vsys <name> profiles virus <name> mlav-exception <name>
set vsys <name> profiles virus <name> mlav-exception <name> filename <value>
set vsys <name> profiles virus <name> mlav-exception <name> description <value>
set vsys <name> profiles spyware
set vsys <name> profiles spyware <name>
set vsys <name> profiles spyware <name> description <value>
set vsys <name> profiles spyware <name> botnet-domains
set vsys <name> profiles spyware <name> botnet-domains lists
set vsys <name> profiles spyware <name> botnet-domains lists <name>
set vsys <name> profiles spyware <name> botnet-domains lists <name> action
set vsys <name> profiles spyware <name> botnet-domains lists <name> action alert
set vsys <name> profiles spyware <name> botnet-domains lists <name> action allow
set vsys <name> profiles spyware <name> botnet-domains lists <name> action block
set vsys <name> profiles spyware <name> botnet-domains lists <name> action sinkhole
set vsys <name> profiles spyware <name> botnet-domains lists <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles spyware <name> botnet-domains dns-security-categories
set vsys <name> profiles spyware <name> botnet-domains dns-security-categories <name>
set vsys <name> profiles spyware <name> botnet-domains dns-security-categories <name> action <default|allow|block|sinkhole>
set vsys <name> profiles spyware <name> botnet-domains dns-security-categories <name> log-level <default|none|low|informational|medium|high|critical>
set vsys <name> profiles spyware <name> botnet-domains dns-security-categories <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles spyware <name> botnet-domains whitelist
set vsys <name> profiles spyware <name> botnet-domains whitelist <name>
set vsys <name> profiles spyware <name> botnet-domains whitelist <name> description <value>
set vsys <name> profiles spyware <name> botnet-domains sinkhole
set vsys <name> profiles spyware <name> botnet-domains sinkhole ipv4-address <value>|<127.0.0.1|pan-sinkhole-default-ip>
set vsys <name> profiles spyware <name> botnet-domains sinkhole ipv6-address <ip/netmask>|<::1>
set vsys <name> profiles spyware <name> botnet-domains threat-exception
set vsys <name> profiles spyware <name> botnet-domains threat-exception <name>
set vsys <name> profiles spyware <name> rules
set vsys <name> profiles spyware <name> rules <name>
set vsys <name> profiles spyware <name> rules <name> threat-name <value>|<any>
set vsys <name> profiles spyware <name> rules <name> category <value>|<any>
set vsys <name> profiles spyware <name> rules <name> severity  [ <severity1> <severity2>... ]
set vsys <name> profiles spyware <name> rules <name> action
set vsys <name> profiles spyware <name> rules <name> action default
set vsys <name> profiles spyware <name> rules <name> action allow
set vsys <name> profiles spyware <name> rules <name> action alert
set vsys <name> profiles spyware <name> rules <name> action drop
set vsys <name> profiles spyware <name> rules <name> action reset-client
set vsys <name> profiles spyware <name> rules <name> action reset-server
set vsys <name> profiles spyware <name> rules <name> action reset-both
set vsys <name> profiles spyware <name> rules <name> action block-ip
set vsys <name> profiles spyware <name> rules <name> action block-ip track-by <source|source-and-destination>
set vsys <name> profiles spyware <name> rules <name> action block-ip duration <1-3600>
set vsys <name> profiles spyware <name> rules <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles spyware <name> threat-exception
set vsys <name> profiles spyware <name> threat-exception <name>
set vsys <name> profiles spyware <name> threat-exception <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles spyware <name> threat-exception <name> action
set vsys <name> profiles spyware <name> threat-exception <name> action default
set vsys <name> profiles spyware <name> threat-exception <name> action allow
set vsys <name> profiles spyware <name> threat-exception <name> action alert
set vsys <name> profiles spyware <name> threat-exception <name> action drop
set vsys <name> profiles spyware <name> threat-exception <name> action reset-both
set vsys <name> profiles spyware <name> threat-exception <name> action reset-client
set vsys <name> profiles spyware <name> threat-exception <name> action reset-server
set vsys <name> profiles spyware <name> threat-exception <name> action block-ip
set vsys <name> profiles spyware <name> threat-exception <name> action block-ip track-by <source|source-and-destination>
set vsys <name> profiles spyware <name> threat-exception <name> action block-ip duration <1-3600>
set vsys <name> profiles spyware <name> threat-exception <name> exempt-ip
set vsys <name> profiles spyware <name> threat-exception <name> exempt-ip <name>
set vsys <name> profiles vulnerability
set vsys <name> profiles vulnerability <name>
set vsys <name> profiles vulnerability <name> description <value>
set vsys <name> profiles vulnerability <name> rules
set vsys <name> profiles vulnerability <name> rules <name>
set vsys <name> profiles vulnerability <name> rules <name> threat-name <value>|<any>
set vsys <name> profiles vulnerability <name> rules <name> cve  [ <cve1> <cve2>... ]
set vsys <name> profiles vulnerability <name> rules <name> host <any|client|server>
set vsys <name> profiles vulnerability <name> rules <name> vendor-id  [ <vendor-id1> <vendor-id2>... ]
set vsys <name> profiles vulnerability <name> rules <name> severity  [ <severity1> <severity2>... ]
set vsys <name> profiles vulnerability <name> rules <name> category <value>|<any>
set vsys <name> profiles vulnerability <name> rules <name> action
set vsys <name> profiles vulnerability <name> rules <name> action default
set vsys <name> profiles vulnerability <name> rules <name> action allow
set vsys <name> profiles vulnerability <name> rules <name> action alert
set vsys <name> profiles vulnerability <name> rules <name> action drop
set vsys <name> profiles vulnerability <name> rules <name> action reset-client
set vsys <name> profiles vulnerability <name> rules <name> action reset-server
set vsys <name> profiles vulnerability <name> rules <name> action reset-both
set vsys <name> profiles vulnerability <name> rules <name> action block-ip
set vsys <name> profiles vulnerability <name> rules <name> action block-ip track-by <source|source-and-destination>
set vsys <name> profiles vulnerability <name> rules <name> action block-ip duration <1-3600>
set vsys <name> profiles vulnerability <name> rules <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles vulnerability <name> threat-exception
set vsys <name> profiles vulnerability <name> threat-exception <name>
set vsys <name> profiles vulnerability <name> threat-exception <name> packet-capture <disable|single-packet|extended-capture>
set vsys <name> profiles vulnerability <name> threat-exception <name> action
set vsys <name> profiles vulnerability <name> threat-exception <name> action default
set vsys <name> profiles vulnerability <name> threat-exception <name> action allow
set vsys <name> profiles vulnerability <name> threat-exception <name> action alert
set vsys <name> profiles vulnerability <name> threat-exception <name> action drop
set vsys <name> profiles vulnerability <name> threat-exception <name> action reset-client
set vsys <name> profiles vulnerability <name> threat-exception <name> action reset-server
set vsys <name> profiles vulnerability <name> threat-exception <name> action reset-both
set vsys <name> profiles vulnerability <name> threat-exception <name> action block-ip
set vsys <name> profiles vulnerability <name> threat-exception <name> action block-ip track-by <source|source-and-destination>
set vsys <name> profiles vulnerability <name> threat-exception <name> action block-ip duration <1-3600>
set vsys <name> profiles vulnerability <name> threat-exception <name> time-attribute
set vsys <name> profiles vulnerability <name> threat-exception <name> time-attribute interval <1-3600>
set vsys <name> profiles vulnerability <name> threat-exception <name> time-attribute threshold <1-65535>
set vsys <name> profiles vulnerability <name> threat-exception <name> time-attribute track-by <source|destination|source-and-destination>
set vsys <name> profiles vulnerability <name> threat-exception <name> exempt-ip
set vsys <name> profiles vulnerability <name> threat-exception <name> exempt-ip <name>
set vsys <name> profiles url-filtering
set vsys <name> profiles url-filtering <name>
set vsys <name> profiles url-filtering <name> description <value>
set vsys <name> profiles url-filtering <name> allow  [ <allow1> <allow2>... ]
set vsys <name> profiles url-filtering <name> alert  [ <alert1> <alert2>... ]
set vsys <name> profiles url-filtering <name> block  [ <block1> <block2>... ]
set vsys <name> profiles url-filtering <name> continue  [ <continue1> <continue2>... ]
set vsys <name> profiles url-filtering <name> override  [ <override1> <override2>... ]
set vsys <name> profiles url-filtering <name> credential-enforcement
set vsys <name> profiles url-filtering <name> credential-enforcement mode
set vsys <name> profiles url-filtering <name> credential-enforcement mode disabled
set vsys <name> profiles url-filtering <name> credential-enforcement mode ip-user
set vsys <name> profiles url-filtering <name> credential-enforcement mode domain-credentials
set vsys <name> profiles url-filtering <name> credential-enforcement mode group-mapping <value>
set vsys <name> profiles url-filtering <name> credential-enforcement log-severity <value>
set vsys <name> profiles url-filtering <name> credential-enforcement allow  [ <allow1> <allow2>... ]
set vsys <name> profiles url-filtering <name> credential-enforcement alert  [ <alert1> <alert2>... ]
set vsys <name> profiles url-filtering <name> credential-enforcement block  [ <block1> <block2>... ]
set vsys <name> profiles url-filtering <name> credential-enforcement continue  [ <continue1> <continue2>... ]
set vsys <name> profiles url-filtering <name> enable-container-page <yes|no>
set vsys <name> profiles url-filtering <name> log-container-page-only <yes|no>
set vsys <name> profiles url-filtering <name> safe-search-enforcement <yes|no>
set vsys <name> profiles url-filtering <name> log-http-hdr-xff <yes|no>
set vsys <name> profiles url-filtering <name> log-http-hdr-user-agent <yes|no>
set vsys <name> profiles url-filtering <name> log-http-hdr-referer <yes|no>
set vsys <name> profiles url-filtering <name> http-header-insertion
set vsys <name> profiles url-filtering <name> http-header-insertion <name>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> headers
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> headers <name>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> header <value>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> value <value>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> headers <name> log <yes|no>
set vsys <name> profiles url-filtering <name> http-header-insertion <name> type <name> domains  [ <domains1> <domains2>... ]
set vsys <name> profiles url-filtering <name> mlav-category-exception  [ <mlav-category-exception1> <mlav-category-exception2>... ]
set vsys <name> profiles url-filtering <name> mlav-engine-urlbased-enabled
set vsys <name> profiles url-filtering <name> mlav-engine-urlbased-enabled <name>
set vsys <name> profiles url-filtering <name> mlav-engine-urlbased-enabled <name> mlav-policy-action <block|alert|allow>
set vsys <name> profiles file-blocking
set vsys <name> profiles file-blocking <name>
set vsys <name> profiles file-blocking <name> description <value>
set vsys <name> profiles file-blocking <name> rules
set vsys <name> profiles file-blocking <name> rules <name>
set vsys <name> profiles file-blocking <name> rules <name> application  [ <application1> <application2>... ]
set vsys <name> profiles file-blocking <name> rules <name> file-type  [ <file-type1> <file-type2>... ]
set vsys <name> profiles file-blocking <name> rules <name> direction <upload|download|both>
set vsys <name> profiles file-blocking <name> rules <name> action <alert|block|continue>
set vsys <name> profiles wildfire-analysis
set vsys <name> profiles wildfire-analysis <name>
set vsys <name> profiles wildfire-analysis <name> description <value>
set vsys <name> profiles wildfire-analysis <name> rules
set vsys <name> profiles wildfire-analysis <name> rules <name>
set vsys <name> profiles wildfire-analysis <name> rules <name> application  [ <application1> <application2>... ]
set vsys <name> profiles wildfire-analysis <name> rules <name> file-type  [ <file-type1> <file-type2>... ]
set vsys <name> profiles wildfire-analysis <name> rules <name> direction <upload|download|both>
set vsys <name> profiles wildfire-analysis <name> rules <name> analysis <public-cloud|private-cloud>
set vsys <name> profiles custom-url-category
set vsys <name> profiles custom-url-category <name>
set vsys <name> profiles custom-url-category <name> description <value>
set vsys <name> profiles custom-url-category <name> list  [ <list1> <list2>... ]
set vsys <name> profiles custom-url-category <name> type <value>
set vsys <name> profiles data-objects
set vsys <name> profiles data-objects <name>
set vsys <name> profiles data-objects <name> description <value>
set vsys <name> profiles data-objects <name> pattern-type
set vsys <name> profiles data-objects <name> pattern-type predefined
set vsys <name> profiles data-objects <name> pattern-type predefined pattern
set vsys <name> profiles data-objects <name> pattern-type predefined pattern <name>
set vsys <name> profiles data-objects <name> pattern-type predefined pattern <name> file-type  [ <file-type1> <file-type2>... ]
set vsys <name> profiles data-objects <name> pattern-type regex
set vsys <name> profiles data-objects <name> pattern-type regex pattern
set vsys <name> profiles data-objects <name> pattern-type regex pattern <name>
set vsys <name> profiles data-objects <name> pattern-type regex pattern <name> file-type  [ <file-type1> <file-type2>... ]
set vsys <name> profiles data-objects <name> pattern-type regex pattern <name> regex <value>
set vsys <name> profiles data-objects <name> pattern-type file-properties
set vsys <name> profiles data-objects <name> pattern-type file-properties pattern
set vsys <name> profiles data-objects <name> pattern-type file-properties pattern <name>
set vsys <name> profiles data-objects <name> pattern-type file-properties pattern <name> file-type <value>
set vsys <name> profiles data-objects <name> pattern-type file-properties pattern <name> file-property <value>
set vsys <name> profiles data-objects <name> pattern-type file-properties pattern <name> property-value <value>
set vsys <name> profiles data-filtering
set vsys <name> profiles data-filtering <name>
set vsys <name> profiles data-filtering <name> description <value>
set vsys <name> profiles data-filtering <name> data-capture <yes|no>
set vsys <name> profiles data-filtering <name> rules
set vsys <name> profiles data-filtering <name> rules <name>
set vsys <name> profiles data-filtering <name> rules <name> data-object <value>
set vsys <name> profiles data-filtering <name> rules <name> application  [ <application1> <application2>... ]
set vsys <name> profiles data-filtering <name> rules <name> file-type  [ <file-type1> <file-type2>... ]
set vsys <name> profiles data-filtering <name> rules <name> direction <upload|download|both>
set vsys <name> profiles data-filtering <name> rules <name> alert-threshold <0-65535>
set vsys <name> profiles data-filtering <name> rules <name> block-threshold <0-65535>
set vsys <name> profiles data-filtering <name> rules <name> log-severity <value>
set vsys <name> profiles hip-profiles
set vsys <name> profiles hip-profiles <name>
set vsys <name> profiles hip-profiles <name> description <value>
set vsys <name> profiles hip-profiles <name> match <value>
set vsys <name> profiles dos-protection
set vsys <name> profiles dos-protection <name>
set vsys <name> profiles dos-protection <name> type <aggregate|classified>
set vsys <name> profiles dos-protection <name> description <value>
set vsys <name> profiles dos-protection <name> flood
set vsys <name> profiles dos-protection <name> flood tcp-syn
set vsys <name> profiles dos-protection <name> flood tcp-syn enable <yes|no>
set vsys <name> profiles dos-protection <name> flood tcp-syn red
set vsys <name> profiles dos-protection <name> flood tcp-syn red alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn red activate-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn red maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn red block
set vsys <name> profiles dos-protection <name> flood tcp-syn red block duration <1-21600>
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies activate-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies block
set vsys <name> profiles dos-protection <name> flood tcp-syn syn-cookies block duration <1-21600>
set vsys <name> profiles dos-protection <name> flood udp
set vsys <name> profiles dos-protection <name> flood udp enable <yes|no>
set vsys <name> profiles dos-protection <name> flood udp red
set vsys <name> profiles dos-protection <name> flood udp red alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood udp red activate-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood udp red maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood udp red block
set vsys <name> profiles dos-protection <name> flood udp red block duration <1-21600>
set vsys <name> profiles dos-protection <name> flood icmp
set vsys <name> profiles dos-protection <name> flood icmp enable <yes|no>
set vsys <name> profiles dos-protection <name> flood icmp red
set vsys <name> profiles dos-protection <name> flood icmp red alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood icmp red activate-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood icmp red maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood icmp red block
set vsys <name> profiles dos-protection <name> flood icmp red block duration <1-21600>
set vsys <name> profiles dos-protection <name> flood icmpv6
set vsys <name> profiles dos-protection <name> flood icmpv6 enable <yes|no>
set vsys <name> profiles dos-protection <name> flood icmpv6 red
set vsys <name> profiles dos-protection <name> flood icmpv6 red alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood icmpv6 red activate-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood icmpv6 red maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood icmpv6 red block
set vsys <name> profiles dos-protection <name> flood icmpv6 red block duration <1-21600>
set vsys <name> profiles dos-protection <name> flood other-ip
set vsys <name> profiles dos-protection <name> flood other-ip enable <yes|no>
set vsys <name> profiles dos-protection <name> flood other-ip red
set vsys <name> profiles dos-protection <name> flood other-ip red alarm-rate <0-2000000>
set vsys <name> profiles dos-protection <name> flood other-ip red activate-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood other-ip red maximal-rate <1-2000000>
set vsys <name> profiles dos-protection <name> flood other-ip red block
set vsys <name> profiles dos-protection <name> flood other-ip red block duration <1-21600>
set vsys <name> profiles dos-protection <name> resource
set vsys <name> profiles dos-protection <name> resource sessions
set vsys <name> profiles dos-protection <name> resource sessions enabled <yes|no>
set vsys <name> profiles dos-protection <name> resource sessions max-concurrent-limit <1-4194304>
set vsys <name> profiles sdwan-path-quality
set vsys <name> profiles sdwan-path-quality <name>
set vsys <name> profiles sdwan-path-quality <name> metric
set vsys <name> profiles sdwan-path-quality <name> metric latency
set vsys <name> profiles sdwan-path-quality <name> metric latency threshold <10-3000>
set vsys <name> profiles sdwan-path-quality <name> metric latency sensitivity <low|medium|high>
set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss
set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss threshold <1-100>
set vsys <name> profiles sdwan-path-quality <name> metric pkt-loss sensitivity <low|medium|high>
set vsys <name> profiles sdwan-path-quality <name> metric jitter
set vsys <name> profiles sdwan-path-quality <name> metric jitter threshold <10-2000>
set vsys <name> profiles sdwan-path-quality <name> metric jitter sensitivity <low|medium|high>
set vsys <name> profiles sdwan-traffic-distribution
set vsys <name> profiles sdwan-traffic-distribution <name>
set vsys <name> profiles sdwan-traffic-distribution <name> traffic-distribution <Best Available Path|Top Down Priority|Weighted Session Distribution>
set vsys <name> profiles sdwan-traffic-distribution <name> link-tags
set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name>
set vsys <name> profiles sdwan-traffic-distribution <name> link-tags <name> weight <0-100>
set vsys <name> profiles sdwan-saas-quality
set vsys <name> profiles sdwan-saas-quality <name>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode adaptive
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address <name>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip ip-address <name> probe-interval <1-60>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn fqdn-name <value>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode static-ip fqdn probe-interval <1-60>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode http-https
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode http-https monitored-url <value>
set vsys <name> profiles sdwan-saas-quality <name> monitor-mode http-https probe-interval <3-60>
set vsys <name> profiles sdwan-error-correction
set vsys <name> profiles sdwan-error-correction <name>
set vsys <name> profiles sdwan-error-correction <name> activation-threshold <1-99>
set vsys <name> profiles sdwan-error-correction <name> mode
set vsys <name> profiles sdwan-error-correction <name> mode forward-error-correction
set vsys <name> profiles sdwan-error-correction <name> mode forward-error-correction ratio <10% (20:2)|20% (20:4)|30% (20:6)|40% (20:8)|50% (20:10)>
set vsys <name> profiles sdwan-error-correction <name> mode forward-error-correction recovery-duration <1-5000>
set vsys <name> profiles sdwan-error-correction <name> mode packet-duplication
set vsys <name> profiles sdwan-error-correction <name> mode packet-duplication recovery-duration-pd <1-5000>
set vsys <name> profiles decryption
set vsys <name> profiles decryption <name>
set vsys <name> profiles decryption <name> interface <value>
set vsys <name> profiles decryption <name> forwarded-only <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy
set vsys <name> profiles decryption <name> ssl-forward-proxy block-expired-certificate <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-untrusted-issuer <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-tls13-downgrade-no-resource <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy restrict-cert-exts <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-unsupported-version <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-unsupported-cipher <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-client-cert <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-if-no-resource <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-if-hsm-unavailable <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-unknown-cert <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy block-timeout-cert <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy auto-include-altname <yes|no>
set vsys <name> profiles decryption <name> ssl-forward-proxy strip-alpn <yes|no>
set vsys <name> profiles decryption <name> ssl-inbound-proxy
set vsys <name> profiles decryption <name> ssl-inbound-proxy block-unsupported-version <yes|no>
set vsys <name> profiles decryption <name> ssl-inbound-proxy block-unsupported-cipher <yes|no>
set vsys <name> profiles decryption <name> ssl-inbound-proxy block-if-no-resource <yes|no>
set vsys <name> profiles decryption <name> ssl-inbound-proxy block-tls13-downgrade-no-resource <yes|no>
set vsys <name> profiles decryption <name> ssl-inbound-proxy block-if-hsm-unavailable <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings
set vsys <name> profiles decryption <name> ssl-protocol-settings min-version <sslv3|tls1-0|tls1-1|tls1-2|tls1-3>
set vsys <name> profiles decryption <name> ssl-protocol-settings max-version <sslv3|tls1-0|tls1-1|tls1-2|tls1-3|max>
set vsys <name> profiles decryption <name> ssl-protocol-settings keyxchg-algo-rsa <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings keyxchg-algo-dhe <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings keyxchg-algo-ecdhe <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-3des <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-rc4 <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-aes-128-cbc <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-aes-256-cbc <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-aes-128-gcm <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-aes-256-gcm <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings enc-algo-chacha20-poly1305 <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings auth-algo-md5 <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings auth-algo-sha1 <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings auth-algo-sha256 <yes|no>
set vsys <name> profiles decryption <name> ssl-protocol-settings auth-algo-sha384 <yes|no>
set vsys <name> profiles decryption <name> ssl-no-proxy
set vsys <name> profiles decryption <name> ssl-no-proxy block-expired-certificate <yes|no>
set vsys <name> profiles decryption <name> ssl-no-proxy block-untrusted-issuer <yes|no>
set vsys <name> profiles decryption <name> ssh-proxy
set vsys <name> profiles decryption <name> ssh-proxy block-unsupported-version <yes|no>
set vsys <name> profiles decryption <name> ssh-proxy block-unsupported-alg <yes|no>
set vsys <name> profiles decryption <name> ssh-proxy block-ssh-errors <yes|no>
set vsys <name> profiles decryption <name> ssh-proxy block-if-no-resource <yes|no>
set vsys <name> profiles packet-broker
set vsys <name> profiles packet-broker <name>
set vsys <name> profiles packet-broker <name> description <value>
set vsys <name> profiles packet-broker <name> interface-primary <value>
set vsys <name> profiles packet-broker <name> interface-secondary <value>
set vsys <name> profiles packet-broker <name> flow <unidirectional|bidirectional>
set vsys <name> profiles packet-broker <name> transparent
set vsys <name> profiles packet-broker <name> transparent enable-ipv6 <yes|no>
set vsys <name> profiles packet-broker <name> routed
set vsys <name> profiles packet-broker <name> routed security-chain
set vsys <name> profiles packet-broker <name> routed security-chain <name>
set vsys <name> profiles packet-broker <name> routed security-chain <name> enable <yes|no>
set vsys <name> profiles packet-broker <name> routed security-chain <name> first-device <ip/netmask>
set vsys <name> profiles packet-broker <name> routed security-chain <name> first-device-description <value>
set vsys <name> profiles packet-broker <name> routed security-chain <name> last-device <ip/netmask>
set vsys <name> profiles packet-broker <name> routed security-chain <name> last-device-description <value>
set vsys <name> profiles packet-broker <name> routed distribution <round-robin|ip-modulo|ip-hash|lowest-latency>
set vsys <name> profiles packet-broker <name> health-check
set vsys <name> profiles packet-broker <name> health-check failure-action <bypass|block>
set vsys <name> profiles packet-broker <name> health-check failure-condition <any|all>
set vsys <name> profiles packet-broker <name> health-check path-enable <yes|no>
set vsys <name> profiles packet-broker <name> health-check path-count <1-10>
set vsys <name> profiles packet-broker <name> health-check path-interval-s <1-60>
set vsys <name> profiles packet-broker <name> health-check path-recovery-hold-s <0-65535>
set vsys <name> profiles packet-broker <name> health-check http-enable <yes|no>
set vsys <name> profiles packet-broker <name> health-check http-count <1-10>
set vsys <name> profiles packet-broker <name> health-check http-interval-s <1-60>
set vsys <name> profiles packet-broker <name> health-check http-latency-enable <yes|no>
set vsys <name> profiles packet-broker <name> health-check http-latency-maximum-ms <10-65535>
set vsys <name> profiles packet-broker <name> health-check http-latency-duration-s <1-65535>
set vsys <name> profiles packet-broker <name> health-check http-latency-log-exceeded <yes|no>
set vsys <name> profile-group
set vsys <name> profile-group <name>
set vsys <name> profile-group <name> virus  [ <virus1> <virus2>... ]
set vsys <name> profile-group <name> spyware  [ <spyware1> <spyware2>... ]
set vsys <name> profile-group <name> vulnerability  [ <vulnerability1> <vulnerability2>... ]
set vsys <name> profile-group <name> url-filtering  [ <url-filtering1> <url-filtering2>... ]
set vsys <name> profile-group <name> file-blocking  [ <file-blocking1> <file-blocking2>... ]
set vsys <name> profile-group <name> wildfire-analysis  [ <wildfire-analysis1> <wildfire-analysis2>... ]
set vsys <name> profile-group <name> data-filtering  [ <data-filtering1> <data-filtering2>... ]
set vsys <name> service
set vsys <name> service <name>
set vsys <name> service <name> description <value>
set vsys <name> service <name> protocol
set vsys <name> service <name> protocol tcp
set vsys <name> service <name> protocol tcp port <0-65535,...>
set vsys <name> service <name> protocol tcp source-port <0-65535,...>
set vsys <name> service <name> protocol tcp override
set vsys <name> service <name> protocol tcp override no
set vsys <name> service <name> protocol tcp override yes
set vsys <name> service <name> protocol tcp override yes timeout <1-604800>
set vsys <name> service <name> protocol tcp override yes halfclose-timeout <1-604800>
set vsys <name> service <name> protocol tcp override yes timewait-timeout <1-600>
set vsys <name> service <name> protocol udp
set vsys <name> service <name> protocol udp port <0-65535,...>
set vsys <name> service <name> protocol udp source-port <0-65535,...>
set vsys <name> service <name> protocol udp override
set vsys <name> service <name> protocol udp override no
set vsys <name> service <name> protocol udp override yes
set vsys <name> service <name> protocol udp override yes timeout <1-604800>
set vsys <name> service <name> tag  [ <tag1> <tag2>... ]
set vsys <name> service-group
set vsys <name> service-group <name>
set vsys <name> service-group <name> members  [ <members1> <members2>... ]
set vsys <name> service-group <name> tag  [ <tag1> <tag2>... ]
set vsys <name> reports
set vsys <name> reports <name>
set vsys <name> reports <name> description <value>
set vsys <name> reports <name> disabled <yes|no>
set vsys <name> reports <name> query <value>
set vsys <name> reports <name> caption <value>
set vsys <name> reports <name> frequency <daily>
set vsys <name> reports <name> start-time <value>
set vsys <name> reports <name> end-time <value>
set vsys <name> reports <name> period <last-15-minutes|last-hour|last-6-hrs|last-12-hrs|last-24-hrs|last-calendar-day|last-7-days|last-7-calendar-days|last-calendar-week|last-30-days|last-30-calendar-days|last-60-days|last-60-calendar-days|last-90-days|last-90-calendar-days|last-calendar-month>
set vsys <name> reports <name> topn <1-10000>
set vsys <name> reports <name> topm <1-50>
set vsys <name> reports <name> type
set vsys <name> reports <name> type appstat
set vsys <name> reports <name> type appstat aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type appstat group-by <serial|vsys_name|device_name|vsys|name|risk|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subcategory-of-name|category-of-name|risk-of-name|container-of-name|technology-of-name>
set vsys <name> reports <name> type appstat values  [ <values1> <values2>... ]
set vsys <name> reports <name> type appstat labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type appstat sortby <nbytes|nsess|npkts|nthreats>
set vsys <name> reports <name> type decryption
set vsys <name> reports <name> type decryption aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type decryption group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|tls_version|tls_keyxchg|tls_enc|tls_auth|ec_curve|err_index|root_status|proxy_type|policy_name|cn|issuer_cn|root_cn|sni|error|src_dag|dst_dag|src_edl|dst_edl|container_id|pod_namespace|pod_name|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time>
set vsys <name> reports <name> type decryption values  [ <values1> <values2>... ]
set vsys <name> reports <name> type decryption labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type decryption sortby <repeatcnt|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type desum
set vsys <name> reports <name> type desum aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type desum group-by <serial|time_generated|vsys_name|device_name|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|app|src|dst|srcuser|dstuser|vsys|tls_version|tls_keyxchg|tls_enc|tls_auth|sni|error|err_index|src_edl|dst_edl|container_id|pod_namespace|pod_name|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time>
set vsys <name> reports <name> type desum values  [ <values1> <values2>... ]
set vsys <name> reports <name> type desum labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type desum sortby <repeatcnt|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type threat
set vsys <name> reports <name> type threat aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type threat group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|threatid|category|severity|direction|http_method|nssai_sst|filedigest|filetype|http2_connection|xff_ip|threat_name|src_edl|dst_edl|dynusergroup_name|hostid|partial_hash|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|misc|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|flag-nat|flag-pcap|subtype|transaction|captive-portal|flag-proxy|non-std-dport|tunnelid|monitortag|users|category-of-threatid|threat-type>
set vsys <name> reports <name> type threat values  [ <values1> <values2>... ]
set vsys <name> reports <name> type threat labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type threat sortby <repeatcnt|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type url
set vsys <name> reports <name> type url aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type url group-by <action|app|category|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|http_headers|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|contenttype|user_agent|device_name|vsys_name|url|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|http_method|url_category_list|xff_ip|container_id|pod_namespace|pod_name|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac>
set vsys <name> reports <name> type url values  [ <values1> <values2>... ]
set vsys <name> reports <name> type url labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type url sortby <repeatcnt|nunique-of-users>
set vsys <name> reports <name> type wildfire
set vsys <name> reports <name> type wildfire aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type wildfire group-by <app|category|category-of-app|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|filetype|filename|filedigest|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|xff_ip|src_dag|dst_dag|src_edl|dst_edl>
set vsys <name> reports <name> type wildfire values  [ <values1> <values2>... ]
set vsys <name> reports <name> type wildfire labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type wildfire sortby <repeatcnt|nunique-of-users>
set vsys <name> reports <name> type data
set vsys <name> reports <name> type data aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type data group-by <action|app|category-of-app|direction|dport|dst|dstuser|from|inbound_if|misc|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|severity|sport|src|srcuser|subcategory-of-app|subtype|technology-of-app|container-of-app|threatid|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|data-type|filename|tunnelid|monitortag|parent_session_id|parent_start_time|http2_connection|tunnel|xff_ip|src_dag|dst_dag|src_edl|dst_edl|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac>
set vsys <name> reports <name> type data values  [ <values1> <values2>... ]
set vsys <name> reports <name> type data labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type data sortby <repeatcnt|nunique-of-users>
set vsys <name> reports <name> type thsum
set vsys <name> reports <name> type thsum aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type thsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|rule|threatid|srcuser|dstuser|srcloc|dstloc|xff_ip|vsys|from|to|dev_serial|dport|action|severity|inbound_if|outbound_if|category|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|tunnel|direction|assoc_id|ppid|http2_connection|rule_uuid|threat_name|src_edl|dst_edl|hostid|dynusergroup_name|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subtype|tunnelid|monitortag|category-of-threatid|threat-type>
set vsys <name> reports <name> type thsum values  [ <values1> <values2>... ]
set vsys <name> reports <name> type thsum labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type thsum sortby <sessions|count|nunique-of-apps|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type traffic
set vsys <name> reports <name> type traffic aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type traffic group-by <serial|time_generated|src|dst|natsrc|natdst|rule|srcuser|dstuser|srcloc|dstloc|app|vsys|from|to|inbound_if|outbound_if|sport|dport|natsport|natdport|proto|action|tunnel|rule_uuid|s_encrypted|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|vsys_name|device_name|parent_session_id|parent_start_time|category|session_end_reason|action_source|nssai_sst|nssai_sd|http2_connection|xff_ip|dynusergroup_name|src_edl|dst_edl|hostid|session_owner|policy_id|offloaded|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|pbf-s2c|pbf-c2s|decrypt-mirror|threat-type|flag-nat|flag-pcap|captive-portal|flag-proxy|non-std-dport|transaction|sym-return|sessionid|flag-decrypt-fwd|tunnelid|monitortag>
set vsys <name> reports <name> type traffic values  [ <values1> <values2>... ]
set vsys <name> reports <name> type traffic labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type traffic sortby <repeatcnt|bytes|bytes_sent|bytes_received|packets|pkts_sent|pkts_received|chunks|chunks_sent|chunks_received|nunique-of-users|elapsed|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type urlsum
set vsys <name> reports <name> type urlsum aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type urlsum group-by <serial|time_generated|vsys_name|device_name|app|category|src|dst|rule|srcuser|dstuser|srcloc|dstloc|vsys|from|to|dev_serial|inbound_if|outbound_if|dport|action|tunnel|url_domain|user_agent|http_method|http2_connection|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|rule_uuid|xff_ip|src_edl|dst_edl|hostid|dynusergroup_name|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|url_category_list|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|monitortag>
set vsys <name> reports <name> type urlsum values  [ <values1> <values2>... ]
set vsys <name> reports <name> type urlsum labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type urlsum sortby <repeatcnt|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type trsum
set vsys <name> reports <name> type trsum aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type trsum group-by <serial|time_generated|vsys_name|device_name|app|src|dst|xff_ip|rule|srcuser|dstuser|srcloc|dstloc|category|vsys|from|to|dev_serial|dport|action|tunnel|inbound_if|outbound_if|category-of-app|subcategory-of-app|technology-of-app|container-of-app|risk-of-app|parent_session_id|parent_start_time|assoc_id|http2_connection|rule_uuid|src_edl|dst_edl|dynusergroup_name|s_decrypted|s_encrypted|hostid|nssai_sst|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|dst_category|dst_profile|dst_model|dst_vendor|dst_osfamily|dst_osversion|dst_host|dst_mac|container_id|pod_namespace|pod_name|src_dag|dst_dag|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|tunnelid|monitortag|standard-ports-of-app>
set vsys <name> reports <name> type trsum values  [ <values1> <values2>... ]
set vsys <name> reports <name> type trsum labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type trsum sortby <bytes|sessions|bytes_sent|bytes_received|nthreats|nftrans|ndpmatches|nurlcount|chunks|chunks_sent|chunks_received|ncontent|nunique-of-apps|nunique-of-users|nunique-of-src_profile|nunique-of-dst_profile>
set vsys <name> reports <name> type tunnel
set vsys <name> reports <name> type tunnel aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type tunnel group-by <action|app|category-of-app|dport|dst|dstuser|from|inbound_if|natdport|natdst|natsport|natsrc|outbound_if|proto|risk-of-app|rule|rule_uuid|sessionid|sport|src|srcuser|subcategory-of-app|technology-of-app|container-of-app|to|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|session_end_reason|action_source|tunnel|tunnel_insp_rule|src_dag|dst_dag|src_edl|dst_edl>
set vsys <name> reports <name> type tunnel values  [ <values1> <values2>... ]
set vsys <name> reports <name> type tunnel labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type tunnel sortby <repeatcnt|bytes|bytes_sent|bytes_received|packets|pkts_sent|pkts_received|max_encap|unknown_proto|strict_check|tunnel_fragment|sessions_created|sessions_closed|nunique-of-users>
set vsys <name> reports <name> type tunnelsum
set vsys <name> reports <name> type tunnelsum aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type tunnelsum group-by <action|app|category-of-app|dst|risk-of-app|rule|rule_uuid|src|subcategory-of-app|technology-of-app|container-of-app|dstloc|srcloc|vsys|quarter-hour-of-receive_time|hour-of-receive_time|day-of-receive_time|serial|vsys_name|device_name|tunnelid|monitortag|parent_session_id|parent_start_time|tunnel|tunnel_insp_rule|src_dag|dst_dag|src_edl|dst_edl>
set vsys <name> reports <name> type tunnelsum values  [ <values1> <values2>... ]
set vsys <name> reports <name> type tunnelsum labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type tunnelsum sortby <repeatcnt|bytes|bytes_sent|bytes_received>
set vsys <name> reports <name> type userid
set vsys <name> reports <name> type userid aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type userid group-by <serial|time_generated|vsys_name|device_name|vsys|ip|user|datasourcename|beginport|endport|datasource|datasourcetype|factortype|factorcompletiontime|factorno|tag_name|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|subtype>
set vsys <name> reports <name> type userid values  [ <values1> <values2>... ]
set vsys <name> reports <name> type userid labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type userid sortby <repeatcnt|factortype|factorcompletiontime>
set vsys <name> reports <name> type auth
set vsys <name> reports <name> type auth aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type auth group-by <serial|time_generated|vsys_name|device_name|vsys|ip|user|normalize_user|object|authpolicy|authid|vendor|clienttype|event|factorno|authproto|rule_uuid|src_category|src_profile|src_model|src_vendor|src_osfamily|src_osversion|src_host|src_mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time|serverprofile|desc>
set vsys <name> reports <name> type auth values  [ <values1> <values2>... ]
set vsys <name> reports <name> type auth labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type auth sortby <repeatcnt|time_generated|vendor>
set vsys <name> reports <name> type iptag
set vsys <name> reports <name> type iptag aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type iptag group-by <serial|time_generated|vsys_name|device_name|vsys|ip|tag_name|event_id|datasourcename|datasource_type|datasource_subtype|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time>
set vsys <name> reports <name> type iptag values  [ <values1> <values2>... ]
set vsys <name> reports <name> type iptag labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type iptag sortby <repeatcnt|time_generated>
set vsys <name> reports <name> type hipmatch
set vsys <name> reports <name> type hipmatch aggregate-by  [ <aggregate-by1> <aggregate-by2>... ]
set vsys <name> reports <name> type hipmatch group-by <serial|time_generated|vsys_name|device_name|srcuser|vsys|machinename|src|matchname|os|matchtype|srcipv6|hostid|mac|day-of-receive_time|hour-of-receive_time|quarter-hour-of-receive_time>
set vsys <name> reports <name> type hipmatch values  [ <values1> <values2>... ]
set vsys <name> reports <name> type hipmatch labels  [ <labels1> <labels2>... ]
set vsys <name> reports <name> type hipmatch sortby <repeatcnt>
set vsys <name> reports <name> type hipmatch last-match-by <>
set vsys <name> report-group
set vsys <name> report-group <name>
set vsys <name> report-group <name> title-page <yes|no>
set vsys <name> report-group <name> predefined <user-activity-report|saas-application-usage-report>
set vsys <name> report-group <name> custom-widget
set vsys <name> report-group <name> custom-widget <name>
set vsys <name> report-group <name> custom-widget <name> custom-report <value>
set vsys <name> report-group <name> custom-widget <name> pdf-summary-report <value>
set vsys <name> report-group <name> custom-widget <name> log-view <value>
set vsys <name> report-group <name> custom-widget <name> csv <value>
set vsys <name> report-group <name> all
set vsys <name> report-group <name> all entry
set vsys <name> report-group <name> all entry include-user-groups-info <yes|no>
set vsys <name> report-group <name> all entry user-groups  [ <user-groups1> <user-groups2>... ]
set vsys <name> report-group <name> selected-zone
set vsys <name> report-group <name> selected-zone entry
set vsys <name> report-group <name> selected-zone entry include-user-groups-info <yes|no>
set vsys <name> report-group <name> selected-zone entry user-groups  [ <user-groups1> <user-groups2>... ]
set vsys <name> report-group <name> selected-zone entry zone <value>
set vsys <name> report-group <name> selected-user-group
set vsys <name> report-group <name> selected-user-group entry
set vsys <name> report-group <name> selected-user-group entry user-group <value>
set vsys <name> report-group <name> variable
set vsys <name> report-group <name> variable <name>
set vsys <name> report-group <name> variable <name> value <value>
set vsys <name> pdf-summary-report
set vsys <name> pdf-summary-report <name>
set vsys <name> pdf-summary-report <name> header
set vsys <name> pdf-summary-report <name> header caption <value>
set vsys <name> pdf-summary-report <name> footer
set vsys <name> pdf-summary-report <name> footer note <value>
set vsys <name> pdf-summary-report <name> custom-widget
set vsys <name> pdf-summary-report <name> custom-widget <name>
set vsys <name> pdf-summary-report <name> custom-widget <name> chart-type <pie|line|bar|table>
set vsys <name> pdf-summary-report <name> custom-widget <name> row <1-6>
set vsys <name> pdf-summary-report <name> custom-widget <name> column <1-3>
set vsys <name> email-scheduler
set vsys <name> email-scheduler <name>
set vsys <name> email-scheduler <name> report-group <value>
set vsys <name> email-scheduler <name> email-profile <value>
set vsys <name> email-scheduler <name> recipient-emails <value>
set vsys <name> email-scheduler <name> recurring
set vsys <name> email-scheduler <name> recurring disabled
set vsys <name> email-scheduler <name> recurring daily
set vsys <name> email-scheduler <name> recurring weekly <sunday|monday|tuesday|wednesday|thursday|friday|saturday>
set vsys <name> email-scheduler <name> recurring monthly <1-31>
set vsys <name> external-list
set vsys <name> external-list <name>
set vsys <name> external-list <name> type
set vsys <name> external-list <name> type predefined-ip
set vsys <name> external-list <name> type predefined-ip exception-list  [ <exception-list1> <exception-list2>... ]
set vsys <name> external-list <name> type predefined-ip description <value>
set vsys <name> external-list <name> type predefined-ip url <value>
set vsys <name> external-list <name> type predefined-url
set vsys <name> external-list <name> type predefined-url exception-list  [ <exception-list1> <exception-list2>... ]
set vsys <name> external-list <name> type predefined-url description <value>
set vsys <name> external-list <name> type predefined-url url <value>
set vsys <name> external-list <name> type ip
set vsys <name> external-list <name> type ip exception-list  [ <exception-list1> <exception-list2>... ]
set vsys <name> external-list <name> type ip description <value>
set vsys <name> external-list <name> type ip url <value>
set vsys <name> external-list <name> type ip certificate-profile <value>|<None>
set vsys <name> external-list <name> type ip auth
set vsys <name> external-list <name> type ip auth username <value>
set vsys <name> external-list <name> type ip auth password <value>
set vsys <name> external-list <name> type ip recurring
set vsys <name> external-list <name> type ip recurring five-minute
set vsys <name> external-list <name> type ip recurring hourly
set vsys <name> external-list <name> type ip recurring daily
set vsys <name> external-list <name> type ip recurring daily at <value>
set vsys <name> external-list <name> type ip recurring weekly
set vsys <name> external-list <name> type ip recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday>
set vsys <name> external-list <name> type ip recurring weekly at <value>
set vsys <name> external-list <name> type ip recurring monthly
set vsys <name> external-list <name> type ip recurring monthly day-of-month <1-31>
set vsys <name> external-list <name> type ip recurring monthly at <value>
set vsys <name> external-list <name> type domain
set vsys <name> external-list <name> type domain exception-list  [ <exception-list1> <exception-list2>... ]
set vsys <name> external-list <name> type domain description <value>
set vsys <name> external-list <name> type domain url <value>
set vsys <name> external-list <name> type domain certificate-profile <value>|<None>
set vsys <name> external-list <name> type domain auth
set vsys <name> external-list <name> type domain auth username <value>
set vsys <name> external-list <name> type domain auth password <value>
set vsys <name> external-list <name> type domain recurring
set vsys <name> external-list <name> type domain recurring hourly
set vsys <name> external-list <name> type domain recurring five-minute
set vsys <name> external-list <name> type domain recurring daily
set vsys <name> external-list <name> type domain recurring daily at <value>
set vsys <name> external-list <name> type domain recurring weekly
set vsys <name> external-list <name> type domain recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday>
set vsys <name> external-list <name> type domain recurring weekly at <value>
set vsys <name> external-list <name> type domain recurring monthly
set vsys <name> external-list <name> type domain recurring monthly day-of-month <1-31>
set vsys <name> external-list <name> type domain recurring monthly at <value>
set vsys <name> external-list <name> type domain expand-domain <yes|no>
set vsys <name> external-list <name> type url
set vsys <name> external-list <name> type url exception-list  [ <exception-list1> <exception-list2>... ]
set vsys <name> external-list <name> type url description <value>
set vsys <name> external-list <name> type url url <value>
set vsys <name> external-list <name> type url certificate-profile <value>|<None>
set vsys <name> external-list <name> type url auth
set vsys <name> external-list <name> type url auth username <value>
set vsys <name> external-list <name> type url auth password <value>
set vsys <name> external-list <name> type url recurring
set vsys <name> external-list <name> type url recurring hourly
set vsys <name> external-list <name> type url recurring five-minute
set vsys <name> external-list <name> type url recurring daily
set vsys <name> external-list <name> type url recurring daily at <value>
set vsys <name> external-list <name> type url recurring weekly
set vsys <name> external-list <name> type url recurring weekly day-of-week <sunday|monday|tuesday|wednesday|thursday|friday|saturday>
set vsys <name> external-list <name> type url recurring weekly at <value>
set vsys <name> external-list <name> type url recurring monthly
set vsys <name> external-list <name> type url recurring monthly day-of-month <1-31>
set vsys <name> external-list <name> type url recurring monthly at <value>
set vsys <name> address
set vsys <name> address <name>
set vsys <name> address <name> description <value>
set vsys <name> address <name> ip-netmask <ip/netmask>
set vsys <name> address <name> ip-range <ip-range>
set vsys <name> address <name> ip-wildcard <ipdiscontmask>
set vsys <name> address <name> fqdn <value>
set vsys <name> address <name> tag  [ <tag1> <tag2>... ]
set vsys <name> address-group
set vsys <name> address-group <name>
set vsys <name> address-group <name> description <value>
set vsys <name> address-group <name> static  [ <static1> <static2>... ]
set vsys <name> address-group <name> dynamic
set vsys <name> address-group <name> dynamic filter <value>
set vsys <name> address-group <name> tag  [ <tag1> <tag2>... ]
set vsys <name> dynamic-user-group
set vsys <name> dynamic-user-group <name>
set vsys <name> dynamic-user-group <name> description <value>
set vsys <name> dynamic-user-group <name> filter <value>
set vsys <name> dynamic-user-group <name> tag  [ <tag1> <tag2>... ]
set vsys <name> schedule
set vsys <name> schedule <name>
set vsys <name> schedule <name> schedule-type
set vsys <name> schedule <name> schedule-type recurring
set vsys <name> schedule <name> schedule-type recurring weekly
set vsys <name> schedule <name> schedule-type recurring weekly sunday  [ <sunday1> <sunday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly monday  [ <monday1> <monday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly tuesday  [ <tuesday1> <tuesday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly wednesday  [ <wednesday1> <wednesday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly thursday  [ <thursday1> <thursday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly friday  [ <friday1> <friday2>... ]
set vsys <name> schedule <name> schedule-type recurring weekly saturday  [ <saturday1> <saturday2>... ]
set vsys <name> schedule <name> schedule-type recurring daily  [ <daily1> <daily2>... ]
set vsys <name> schedule <name> schedule-type non-recurring  [ <non-recurring1> <non-recurring2>... ]
set vsys <name> threats
set vsys <name> threats vulnerability
set vsys <name> threats vulnerability <name>
set vsys <name> threats vulnerability <name> threatname <value>
set vsys <name> threats vulnerability <name> affected-host
set vsys <name> threats vulnerability <name> affected-host client <yes|no>
set vsys <name> threats vulnerability <name> affected-host server <yes|no>
set vsys <name> threats vulnerability <name> comment <value>
set vsys <name> threats vulnerability <name> severity <value>
set vsys <name> threats vulnerability <name> direction <value>
set vsys <name> threats vulnerability <name> default-action
set vsys <name> threats vulnerability <name> default-action alert
set vsys <name> threats vulnerability <name> default-action drop
set vsys <name> threats vulnerability <name> default-action reset-client
set vsys <name> threats vulnerability <name> default-action reset-server
set vsys <name> threats vulnerability <name> default-action reset-both
set vsys <name> threats vulnerability <name> default-action block-ip
set vsys <name> threats vulnerability <name> default-action block-ip track-by <source|source-and-destination>
set vsys <name> threats vulnerability <name> default-action block-ip duration <1-3600>
set vsys <name> threats vulnerability <name> default-action allow
set vsys <name> threats vulnerability <name> cve  [ <cve1> <cve2>... ]
set vsys <name> threats vulnerability <name> bugtraq  [ <bugtraq1> <bugtraq2>... ]
set vsys <name> threats vulnerability <name> vendor  [ <vendor1> <vendor2>... ]
set vsys <name> threats vulnerability <name> reference  [ <reference1> <reference2>... ]
set vsys <name> threats vulnerability <name> signature
set vsys <name> threats vulnerability <name> signature standard
set vsys <name> threats vulnerability <name> signature standard <name>
set vsys <name> threats vulnerability <name> signature standard <name> comment <value>
set vsys <name> threats vulnerability <name> signature standard <name> scope <protocol-data-unit|session>
set vsys <name> threats vulnerability <name> signature standard <name> order-free <yes|no>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than context <value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to context <value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to value <0-4294967295>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> value <1-127>|<value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than context <value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match context <value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match pattern <value>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match negate <yes|no>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name>
set vsys <name> threats vulnerability <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value>
set vsys <name> threats vulnerability <name> signature combination
set vsys <name> threats vulnerability <name> signature combination time-attribute
set vsys <name> threats vulnerability <name> signature combination time-attribute interval <1-3600>
set vsys <name> threats vulnerability <name> signature combination time-attribute threshold <1-255>
set vsys <name> threats vulnerability <name> signature combination time-attribute track-by <source|destination|source-and-destination>
set vsys <name> threats vulnerability <name> signature combination order-free <yes|no>
set vsys <name> threats vulnerability <name> signature combination and-condition
set vsys <name> threats vulnerability <name> signature combination and-condition <name>
set vsys <name> threats vulnerability <name> signature combination and-condition <name> or-condition
set vsys <name> threats vulnerability <name> signature combination and-condition <name> or-condition <name>
set vsys <name> threats vulnerability <name> signature combination and-condition <name> or-condition <name> threat-id <value>
set vsys <name> threats spyware
set vsys <name> threats spyware <name>
set vsys <name> threats spyware <name> threatname <value>
set vsys <name> threats spyware <name> comment <value>
set vsys <name> threats spyware <name> severity <value>
set vsys <name> threats spyware <name> direction <value>
set vsys <name> threats spyware <name> default-action
set vsys <name> threats spyware <name> default-action alert
set vsys <name> threats spyware <name> default-action drop
set vsys <name> threats spyware <name> default-action reset-client
set vsys <name> threats spyware <name> default-action reset-server
set vsys <name> threats spyware <name> default-action reset-both
set vsys <name> threats spyware <name> default-action block-ip
set vsys <name> threats spyware <name> default-action block-ip track-by <source|source-and-destination>
set vsys <name> threats spyware <name> default-action block-ip duration <1-3600>
set vsys <name> threats spyware <name> default-action allow
set vsys <name> threats spyware <name> cve  [ <cve1> <cve2>... ]
set vsys <name> threats spyware <name> bugtraq  [ <bugtraq1> <bugtraq2>... ]
set vsys <name> threats spyware <name> vendor  [ <vendor1> <vendor2>... ]
set vsys <name> threats spyware <name> reference  [ <reference1> <reference2>... ]
set vsys <name> threats spyware <name> signature
set vsys <name> threats spyware <name> signature standard
set vsys <name> threats spyware <name> signature standard <name>
set vsys <name> threats spyware <name> signature standard <name> comment <value>
set vsys <name> threats spyware <name> signature standard <name> scope <protocol-data-unit|session>
set vsys <name> threats spyware <name> signature standard <name> order-free <yes|no>
set vsys <name> threats spyware <name> signature standard <name> and-condition
set vsys <name> threats spyware <name> signature standard <name> and-condition <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than context <value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to value <0-4294967295>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to context <value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator equal-to qualifier <name> value <1-127>|<value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than context <value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match context <value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match pattern <value>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match negate <yes|no>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name>
set vsys <name> threats spyware <name> signature standard <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value>
set vsys <name> threats spyware <name> signature combination
set vsys <name> threats spyware <name> signature combination time-attribute
set vsys <name> threats spyware <name> signature combination time-attribute interval <1-3600>
set vsys <name> threats spyware <name> signature combination time-attribute threshold <1-255>
set vsys <name> threats spyware <name> signature combination time-attribute track-by <source|destination|source-and-destination>
set vsys <name> threats spyware <name> signature combination order-free <yes|no>
set vsys <name> threats spyware <name> signature combination and-condition
set vsys <name> threats spyware <name> signature combination and-condition <name>
set vsys <name> threats spyware <name> signature combination and-condition <name> or-condition
set vsys <name> threats spyware <name> signature combination and-condition <name> or-condition <name>
set vsys <name> threats spyware <name> signature combination and-condition <name> or-condition <name> threat-id <value>
set vsys <name> application
set vsys <name> application <name>
set vsys <name> application <name> default
set vsys <name> application <name> default port  [ <port1> <port2>... ]
set vsys <name> application <name> default ident-by-ip-protocol <0-255,...>
set vsys <name> application <name> default ident-by-icmp-type
set vsys <name> application <name> default ident-by-icmp-type type <0-255,...>
set vsys <name> application <name> default ident-by-icmp-type code <0-255,...>
set vsys <name> application <name> default ident-by-icmp6-type
set vsys <name> application <name> default ident-by-icmp6-type type <0-255,...>
set vsys <name> application <name> default ident-by-icmp6-type code <0-255,...>
set vsys <name> application <name> category <value>
set vsys <name> application <name> subcategory <value>
set vsys <name> application <name> technology <value>
set vsys <name> application <name> description <value>
set vsys <name> application <name> timeout <0-604800>
set vsys <name> application <name> tcp-timeout <0-604800>
set vsys <name> application <name> udp-timeout <0-604800>
set vsys <name> application <name> tcp-half-closed-timeout <1-604800>
set vsys <name> application <name> tcp-time-wait-timeout <1-600>
set vsys <name> application <name> risk <1-5>
set vsys <name> application <name> evasive-behavior <yes|no>
set vsys <name> application <name> consume-big-bandwidth <yes|no>
set vsys <name> application <name> used-by-malware <yes|no>
set vsys <name> application <name> able-to-transfer-file <yes|no>
set vsys <name> application <name> has-known-vulnerability <yes|no>
set vsys <name> application <name> tunnel-other-application <yes|no>
set vsys <name> application <name> tunnel-applications <yes|no>
set vsys <name> application <name> prone-to-misuse <yes|no>
set vsys <name> application <name> pervasive-use <yes|no>
set vsys <name> application <name> file-type-ident <yes|no>
set vsys <name> application <name> virus-ident <yes|no>
set vsys <name> application <name> data-ident <yes|no>
set vsys <name> application <name> no-appid-caching <yes|no>
set vsys <name> application <name> alg-disable-capability <value>
set vsys <name> application <name> parent-app <value>
set vsys <name> application <name> signature
set vsys <name> application <name> signature <name>
set vsys <name> application <name> signature <name> comment <value>
set vsys <name> application <name> signature <name> scope <protocol-data-unit|session>
set vsys <name> application <name> signature <name> order-free <yes|no>
set vsys <name> application <name> signature <name> and-condition
set vsys <name> application <name> signature <name> and-condition <name>
set vsys <name> application <name> signature <name> and-condition <name> or-condition
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match context <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match pattern <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator pattern-match qualifier <name> value <1-127>|<value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than context <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than value <0-4294967295>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier <name>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator greater-than qualifier <name> value <1-127>|<value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than context <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than value <0-4294967295>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier <name>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator less-than qualifier <name> value <1-127>|<value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator equal-to
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator equal-to context <value>|<unknown-req-tcp|unknown-rsp-tcp|unknown-req-udp|unknown-rsp-udp>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator equal-to position <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator equal-to mask <value>
set vsys <name> application <name> signature <name> and-condition <name> or-condition <name> operator equal-to value <value>
set vsys <name> application-tag
set vsys <name> application-tag <name>
set vsys <name> application-tag <name> tag  [ <tag1> <tag2>... ]
set vsys <name> application-filter
set vsys <name> application-filter <name>
set vsys <name> application-filter <name> category  [ <category1> <category2>... ]
set vsys <name> application-filter <name> subcategory  [ <subcategory1> <subcategory2>... ]
set vsys <name> application-filter <name> technology  [ <technology1> <technology2>... ]
set vsys <name> application-filter <name> evasive <yes>
set vsys <name> application-filter <name> excessive-bandwidth-use <yes>
set vsys <name> application-filter <name> used-by-malware <yes>
set vsys <name> application-filter <name> transfers-files <yes>
set vsys <name> application-filter <name> has-known-vulnerabilities <yes>
set vsys <name> application-filter <name> tunnels-other-apps <yes>
set vsys <name> application-filter <name> prone-to-misuse <yes>
set vsys <name> application-filter <name> pervasive <yes>
set vsys <name> application-filter <name> is-saas <yes>
set vsys <name> application-filter <name> new-appid <yes>
set vsys <name> application-filter <name> risk  [ <risk1> <risk2>... ]
set vsys <name> application-filter <name> saas-certifications  [ <saas-certifications1> <saas-certifications2>... ]
set vsys <name> application-filter <name> saas-risk  [ <saas-risk1> <saas-risk2>... ]
set vsys <name> application-filter <name> tagging
set vsys <name> application-filter <name> tagging no-tag <yes>
set vsys <name> application-filter <name> tagging tag  [ <tag1> <tag2>... ]
set vsys <name> application-filter <name> exclude  [ <exclude1> <exclude2>... ]
set vsys <name> application-group
set vsys <name> application-group <name>
set vsys <name> application-group <name> members  [ <members1> <members2>... ]
set vsys <name> device-object
set vsys <name> device-object <name>
set vsys <name> device-object <name> description <value>
set vsys <name> device-object <name> category  [ <category1> <category2>... ]
set vsys <name> device-object <name> profile  [ <profile1> <profile2>... ]
set vsys <name> device-object <name> osfamily  [ <osfamily1> <osfamily2>... ]
set vsys <name> device-object <name> os  [ <os1> <os2>... ]
set vsys <name> device-object <name> model  [ <model1> <model2>... ]
set vsys <name> device-object <name> vendor  [ <vendor1> <vendor2>... ]
set vsys <name> region
set vsys <name> region <name>
set vsys <name> region <name> geo-location
set vsys <name> region <name> geo-location latitude <float>
set vsys <name> region <name> geo-location longitude <float>
set vsys <name> region <name> address  [ <address1> <address2>... ]
set vsys <name> tag
set vsys <name> tag <name>
set vsys <name> tag <name> color <color1|color2|color3|color4|color5|color6|color7|color8|color9|color10|color11|color12|color13|color14|color15|color16|color17|color19|color20|color21|color22|color23|color24|color25|color26|color27|color28|color29|color30|color31|color32|color33|color34|color35|color36|color37|color38|color39|color40|color41|color42>
set vsys <name> tag <name> comments <value>
set vsys <name> authentication-object
set vsys <name> authentication-object <name>
set vsys <name> authentication-object <name> authentication-method <web-form|no-captive-portal|browser-challenge>
set vsys <name> authentication-object <name> authentication-profile <value>
set vsys <name> authentication-object <name> message <value>
set vsys <name> rulebase
set vsys <name> rulebase security
set vsys <name> rulebase security rules
set vsys <name> rulebase security rules <name>
set vsys <name> rulebase security rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase security rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase security rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase security rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase security rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase security rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase security rules <name> category  [ <category1> <category2>... ]
set vsys <name> rulebase security rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase security rules <name> source-hip  [ <source-hip1> <source-hip2>... ]
set vsys <name> rulebase security rules <name> destination-hip  [ <destination-hip1> <destination-hip2>... ]
set vsys <name> rulebase security rules <name> schedule <value>
set vsys <name> rulebase security rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase security rules <name> negate-source <yes|no>
set vsys <name> rulebase security rules <name> negate-destination <yes|no>
set vsys <name> rulebase security rules <name> disabled <yes|no>
set vsys <name> rulebase security rules <name> description <value>
set vsys <name> rulebase security rules <name> group-tag <value>
set vsys <name> rulebase security rules <name> hip-profiles  [ <hip-profiles1> <hip-profiles2>... ]
set vsys <name> rulebase security rules <name> action <deny|allow|drop|reset-client|reset-server|reset-both>
set vsys <name> rulebase security rules <name> icmp-unreachable <yes|no>
set vsys <name> rulebase security rules <name> rule-type <universal|intrazone|interzone>
set vsys <name> rulebase security rules <name> option
set vsys <name> rulebase security rules <name> option disable-server-response-inspection <yes|no>
set vsys <name> rulebase security rules <name> log-setting <value>
set vsys <name> rulebase security rules <name> log-start <yes|no>
set vsys <name> rulebase security rules <name> log-end <yes|no>
set vsys <name> rulebase security rules <name> profile-setting
set vsys <name> rulebase security rules <name> profile-setting profiles
set vsys <name> rulebase security rules <name> profile-setting profiles url-filtering  [ <url-filtering1> <url-filtering2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles data-filtering  [ <data-filtering1> <data-filtering2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles file-blocking  [ <file-blocking1> <file-blocking2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles wildfire-analysis  [ <wildfire-analysis1> <wildfire-analysis2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles virus  [ <virus1> <virus2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles spyware  [ <spyware1> <spyware2>... ]
set vsys <name> rulebase security rules <name> profile-setting profiles vulnerability  [ <vulnerability1> <vulnerability2>... ]
set vsys <name> rulebase security rules <name> profile-setting group  [ <group1> <group2>... ]
set vsys <name> rulebase security rules <name> qos
set vsys <name> rulebase security rules <name> qos marking
set vsys <name> rulebase security rules <name> qos marking ip-dscp <value>|<ef|af11|af12|af13|af21|af22|af23|af31|af32|af33|af41|af42|af43|cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7>
set vsys <name> rulebase security rules <name> qos marking ip-precedence <value>|<cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7>
set vsys <name> rulebase security rules <name> qos marking follow-c2s-flow
set vsys <name> rulebase default-security-rules
set vsys <name> rulebase default-security-rules rules
set vsys <name> rulebase default-security-rules rules <name>
set vsys <name> rulebase default-security-rules rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase default-security-rules rules <name> log-setting <value>
set vsys <name> rulebase default-security-rules rules <name> log-start <yes|no>
set vsys <name> rulebase default-security-rules rules <name> log-end <yes|no>
set vsys <name> rulebase default-security-rules rules <name> profile-setting
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles url-filtering  [ <url-filtering1> <url-filtering2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles data-filtering  [ <data-filtering1> <data-filtering2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles file-blocking  [ <file-blocking1> <file-blocking2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles wildfire-analysis  [ <wildfire-analysis1> <wildfire-analysis2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles virus  [ <virus1> <virus2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles spyware  [ <spyware1> <spyware2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting profiles vulnerability  [ <vulnerability1> <vulnerability2>... ]
set vsys <name> rulebase default-security-rules rules <name> profile-setting group  [ <group1> <group2>... ]
set vsys <name> rulebase default-security-rules rules <name> group-tag <value>
set vsys <name> rulebase default-security-rules rules <name> action <deny|allow|drop|reset-client|reset-server|reset-both>
set vsys <name> rulebase default-security-rules rules <name> icmp-unreachable <yes|no>
set vsys <name> rulebase application-override
set vsys <name> rulebase application-override rules
set vsys <name> rulebase application-override rules <name>
set vsys <name> rulebase application-override rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase application-override rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase application-override rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase application-override rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase application-override rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase application-override rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase application-override rules <name> negate-source <yes|no>
set vsys <name> rulebase application-override rules <name> negate-destination <yes|no>
set vsys <name> rulebase application-override rules <name> disabled <yes|no>
set vsys <name> rulebase application-override rules <name> description <value>
set vsys <name> rulebase application-override rules <name> group-tag <value>
set vsys <name> rulebase application-override rules <name> protocol <tcp|udp>
set vsys <name> rulebase application-override rules <name> port <0-65535,...>
set vsys <name> rulebase application-override rules <name> application <value>
set vsys <name> rulebase decryption
set vsys <name> rulebase decryption rules
set vsys <name> rulebase decryption rules <name>
set vsys <name> rulebase decryption rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase decryption rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase decryption rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase decryption rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase decryption rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase decryption rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase decryption rules <name> negate-source <yes|no>
set vsys <name> rulebase decryption rules <name> negate-destination <yes|no>
set vsys <name> rulebase decryption rules <name> disabled <yes|no>
set vsys <name> rulebase decryption rules <name> description <value>
set vsys <name> rulebase decryption rules <name> group-tag <value>
set vsys <name> rulebase decryption rules <name> source-hip  [ <source-hip1> <source-hip2>... ]
set vsys <name> rulebase decryption rules <name> destination-hip  [ <destination-hip1> <destination-hip2>... ]
set vsys <name> rulebase decryption rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase decryption rules <name> category  [ <category1> <category2>... ]
set vsys <name> rulebase decryption rules <name> action <no-decrypt|decrypt>
set vsys <name> rulebase decryption rules <name> type
set vsys <name> rulebase decryption rules <name> type ssl-forward-proxy
set vsys <name> rulebase decryption rules <name> type ssh-proxy
set vsys <name> rulebase decryption rules <name> type ssl-inbound-inspection <value>
set vsys <name> rulebase decryption rules <name> profile <value>
set vsys <name> rulebase decryption rules <name> log-success <yes|no>
set vsys <name> rulebase decryption rules <name> log-fail <yes|no>
set vsys <name> rulebase decryption rules <name> log-setting <value>
set vsys <name> rulebase authentication
set vsys <name> rulebase authentication rules
set vsys <name> rulebase authentication rules <name>
set vsys <name> rulebase authentication rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase authentication rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase authentication rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase authentication rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase authentication rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase authentication rules <name> source-hip  [ <source-hip1> <source-hip2>... ]
set vsys <name> rulebase authentication rules <name> destination-hip  [ <destination-hip1> <destination-hip2>... ]
set vsys <name> rulebase authentication rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase authentication rules <name> negate-source <yes|no>
set vsys <name> rulebase authentication rules <name> negate-destination <yes|no>
set vsys <name> rulebase authentication rules <name> disabled <yes|no>
set vsys <name> rulebase authentication rules <name> description <value>
set vsys <name> rulebase authentication rules <name> group-tag <value>
set vsys <name> rulebase authentication rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase authentication rules <name> category  [ <category1> <category2>... ]
set vsys <name> rulebase authentication rules <name> hip-profiles  [ <hip-profiles1> <hip-profiles2>... ]
set vsys <name> rulebase authentication rules <name> authentication-enforcement <value>
set vsys <name> rulebase authentication rules <name> log-setting <value>
set vsys <name> rulebase authentication rules <name> timeout <1-1440>
set vsys <name> rulebase authentication rules <name> log-authentication-timeout <yes|no>
set vsys <name> rulebase tunnel-inspect
set vsys <name> rulebase tunnel-inspect rules
set vsys <name> rulebase tunnel-inspect rules <name>
set vsys <name> rulebase tunnel-inspect rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> negate-source <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> negate-destination <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> disabled <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> description <value>
set vsys <name> rulebase tunnel-inspect rules <name> group-tag <value>
set vsys <name> rulebase tunnel-inspect rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> tunnel-id
set vsys <name> rulebase tunnel-inspect rules <name> tunnel-id vni
set vsys <name> rulebase tunnel-inspect rules <name> tunnel-id vni <name>
set vsys <name> rulebase tunnel-inspect rules <name> tunnel-id vni <name> id <0-16777215,...>
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options max-level-inspection <1|2>
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options drop-over-max <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options drop-unknown-protocol <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options drop-strict-checking <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> inspect-options return-vxlan-to-source <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> zone-assign
set vsys <name> rulebase tunnel-inspect rules <name> zone-assign source  [ <source1> <source2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> zone-assign destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options monitor-name <value>
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options monitor-id <1-16777215>
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options log-setting-override
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options log-setting-override enable <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-setting <value>
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-start <yes|no>
set vsys <name> rulebase tunnel-inspect rules <name> monitor-options log-setting-override log-end <yes|no>
set vsys <name> rulebase nat
set vsys <name> rulebase nat rules
set vsys <name> rulebase nat rules <name>
set vsys <name> rulebase nat rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase nat rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase nat rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase nat rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase nat rules <name> service <value>
set vsys <name> rulebase nat rules <name> nat-type <ipv4|nat64|nptv6>
set vsys <name> rulebase nat rules <name> to-interface <value>|<any>
set vsys <name> rulebase nat rules <name> source-translation
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port translated-address  [ <translated-address1> <translated-address2>... ]
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address interface <value>
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address ip <value>
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip-and-port interface-address floating-ip <value>
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip translated-address  [ <translated-address1> <translated-address2>... ]
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback translated-address  [ <translated-address1> <translated-address2>... ]
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback interface-address
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback interface-address interface <value>
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback interface-address ip <value>
set vsys <name> rulebase nat rules <name> source-translation dynamic-ip fallback interface-address floating-ip <value>
set vsys <name> rulebase nat rules <name> source-translation static-ip
set vsys <name> rulebase nat rules <name> source-translation static-ip translated-address <value>|<ip/netmask>|<ip-range>
set vsys <name> rulebase nat rules <name> source-translation static-ip bi-directional <yes|no>
set vsys <name> rulebase nat rules <name> destination-translation
set vsys <name> rulebase nat rules <name> destination-translation translated-address <value>|<ip/netmask>|<ip-range>
set vsys <name> rulebase nat rules <name> destination-translation translated-port <1-65535>
set vsys <name> rulebase nat rules <name> destination-translation dns-rewrite
set vsys <name> rulebase nat rules <name> destination-translation dns-rewrite direction <reverse|forward>
set vsys <name> rulebase nat rules <name> dynamic-destination-translation
set vsys <name> rulebase nat rules <name> dynamic-destination-translation translated-address <value>|<ip/netmask>|<ip-range>
set vsys <name> rulebase nat rules <name> dynamic-destination-translation translated-port <1-65535>
set vsys <name> rulebase nat rules <name> dynamic-destination-translation distribution <round-robin|source-ip-hash|ip-modulo|ip-hash|least-sessions>
set vsys <name> rulebase nat rules <name> active-active-device-binding <primary|both|0|1>
set vsys <name> rulebase nat rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase nat rules <name> disabled <yes|no>
set vsys <name> rulebase nat rules <name> description <value>
set vsys <name> rulebase nat rules <name> group-tag <value>
set vsys <name> rulebase qos
set vsys <name> rulebase qos rules
set vsys <name> rulebase qos rules <name>
set vsys <name> rulebase qos rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase qos rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase qos rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase qos rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase qos rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase qos rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase qos rules <name> category  [ <category1> <category2>... ]
set vsys <name> rulebase qos rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase qos rules <name> source-hip  [ <source-hip1> <source-hip2>... ]
set vsys <name> rulebase qos rules <name> destination-hip  [ <destination-hip1> <destination-hip2>... ]
set vsys <name> rulebase qos rules <name> schedule <value>
set vsys <name> rulebase qos rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase qos rules <name> negate-source <yes|no>
set vsys <name> rulebase qos rules <name> negate-destination <yes|no>
set vsys <name> rulebase qos rules <name> disabled <yes|no>
set vsys <name> rulebase qos rules <name> description <value>
set vsys <name> rulebase qos rules <name> group-tag <value>
set vsys <name> rulebase qos rules <name> dscp-tos
set vsys <name> rulebase qos rules <name> dscp-tos any
set vsys <name> rulebase qos rules <name> dscp-tos codepoints
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> ef
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> ef codepoint <ef>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> af
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> af codepoint <af11|af12|af13|af21|af22|af23|af31|af32|af33|af41|af42|af43>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> cs
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> cs codepoint <cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> tos
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> tos codepoint <cs0|cs1|cs2|cs3|cs4|cs5|cs6|cs7>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> custom
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint name <value>
set vsys <name> rulebase qos rules <name> dscp-tos codepoints <name> custom codepoint value <value>
set vsys <name> rulebase qos rules <name> action
set vsys <name> rulebase qos rules <name> action class <1|2|3|4|5|6|7|8>
set vsys <name> rulebase pbf
set vsys <name> rulebase pbf rules
set vsys <name> rulebase pbf rules <name>
set vsys <name> rulebase pbf rules <name> from
set vsys <name> rulebase pbf rules <name> from zone  [ <zone1> <zone2>... ]
set vsys <name> rulebase pbf rules <name> from interface  [ <interface1> <interface2>... ]
set vsys <name> rulebase pbf rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase pbf rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase pbf rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase pbf rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase pbf rules <name> schedule <value>
set vsys <name> rulebase pbf rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase pbf rules <name> negate-source <yes|no>
set vsys <name> rulebase pbf rules <name> negate-destination <yes|no>
set vsys <name> rulebase pbf rules <name> disabled <yes|no>
set vsys <name> rulebase pbf rules <name> description <value>
set vsys <name> rulebase pbf rules <name> group-tag <value>
set vsys <name> rulebase pbf rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase pbf rules <name> action
set vsys <name> rulebase pbf rules <name> action forward
set vsys <name> rulebase pbf rules <name> action forward egress-interface <value>
set vsys <name> rulebase pbf rules <name> action forward nexthop
set vsys <name> rulebase pbf rules <name> action forward nexthop ip-address <value>|<ip/netmask>
set vsys <name> rulebase pbf rules <name> action forward nexthop fqdn <value>
set vsys <name> rulebase pbf rules <name> action forward monitor
set vsys <name> rulebase pbf rules <name> action forward monitor profile <value>
set vsys <name> rulebase pbf rules <name> action forward monitor disable-if-unreachable <yes|no>
set vsys <name> rulebase pbf rules <name> action forward monitor ip-address <ip/netmask>
set vsys <name> rulebase pbf rules <name> action forward-to-vsys <value>
set vsys <name> rulebase pbf rules <name> action discard
set vsys <name> rulebase pbf rules <name> action no-pbf
set vsys <name> rulebase pbf rules <name> enforce-symmetric-return
set vsys <name> rulebase pbf rules <name> enforce-symmetric-return enabled <yes|no>
set vsys <name> rulebase pbf rules <name> enforce-symmetric-return nexthop-address-list
set vsys <name> rulebase pbf rules <name> enforce-symmetric-return nexthop-address-list <name>
set vsys <name> rulebase pbf rules <name> active-active-device-binding <both|0|1>
set vsys <name> rulebase sdwan
set vsys <name> rulebase sdwan rules
set vsys <name> rulebase sdwan rules <name>
set vsys <name> rulebase sdwan rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase sdwan rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase sdwan rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase sdwan rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase sdwan rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase sdwan rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase sdwan rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase sdwan rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase sdwan rules <name> negate-source <yes|no>
set vsys <name> rulebase sdwan rules <name> negate-destination <yes|no>
set vsys <name> rulebase sdwan rules <name> disabled <yes|no>
set vsys <name> rulebase sdwan rules <name> description <value>
set vsys <name> rulebase sdwan rules <name> group-tag <value>
set vsys <name> rulebase sdwan rules <name> path-quality-profile <value>
set vsys <name> rulebase sdwan rules <name> saas-quality-profile <value>
set vsys <name> rulebase sdwan rules <name> error-correction-profile <value>
set vsys <name> rulebase sdwan rules <name> action
set vsys <name> rulebase sdwan rules <name> action traffic-distribution-profile <value>
set vsys <name> rulebase sdwan rules <name> action app-failover-for-nat-sessions <keep-existing-link|failover-to-better-path>
set vsys <name> rulebase dos
set vsys <name> rulebase dos rules
set vsys <name> rulebase dos rules <name>
set vsys <name> rulebase dos rules <name> from
set vsys <name> rulebase dos rules <name> from zone  [ <zone1> <zone2>... ]
set vsys <name> rulebase dos rules <name> from interface  [ <interface1> <interface2>... ]
set vsys <name> rulebase dos rules <name> to
set vsys <name> rulebase dos rules <name> to zone  [ <zone1> <zone2>... ]
set vsys <name> rulebase dos rules <name> to interface  [ <interface1> <interface2>... ]
set vsys <name> rulebase dos rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase dos rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase dos rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase dos rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase dos rules <name> schedule <value>
set vsys <name> rulebase dos rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase dos rules <name> negate-source <yes|no>
set vsys <name> rulebase dos rules <name> negate-destination <yes|no>
set vsys <name> rulebase dos rules <name> disabled <yes|no>
set vsys <name> rulebase dos rules <name> description <value>
set vsys <name> rulebase dos rules <name> group-tag <value>
set vsys <name> rulebase dos rules <name> protection
set vsys <name> rulebase dos rules <name> protection aggregate
set vsys <name> rulebase dos rules <name> protection aggregate profile <value>
set vsys <name> rulebase dos rules <name> protection classified
set vsys <name> rulebase dos rules <name> protection classified profile <value>
set vsys <name> rulebase dos rules <name> protection classified classification-criteria
set vsys <name> rulebase dos rules <name> protection classified classification-criteria address <source-ip-only|destination-ip-only|src-dest-ip-both>
set vsys <name> rulebase dos rules <name> action
set vsys <name> rulebase dos rules <name> action deny
set vsys <name> rulebase dos rules <name> action allow
set vsys <name> rulebase dos rules <name> action protect
set vsys <name> rulebase dos rules <name> log-setting <value>
set vsys <name> rulebase network-packet-broker
set vsys <name> rulebase network-packet-broker rules
set vsys <name> rulebase network-packet-broker rules <name>
set vsys <name> rulebase network-packet-broker rules <name> from  [ <from1> <from2>... ]
set vsys <name> rulebase network-packet-broker rules <name> to  [ <to1> <to2>... ]
set vsys <name> rulebase network-packet-broker rules <name> source  [ <source1> <source2>... ]
set vsys <name> rulebase network-packet-broker rules <name> source-user  [ <source-user1> <source-user2>... ]
set vsys <name> rulebase network-packet-broker rules <name> destination  [ <destination1> <destination2>... ]
set vsys <name> rulebase network-packet-broker rules <name> application  [ <application1> <application2>... ]
set vsys <name> rulebase network-packet-broker rules <name> service  [ <service1> <service2>... ]
set vsys <name> rulebase network-packet-broker rules <name> tag  [ <tag1> <tag2>... ]
set vsys <name> rulebase network-packet-broker rules <name> negate-source <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> negate-destination <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> disabled <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> description <value>
set vsys <name> rulebase network-packet-broker rules <name> group-tag <value>
set vsys <name> rulebase network-packet-broker rules <name> source-hip  [ <source-hip1> <source-hip2>... ]
set vsys <name> rulebase network-packet-broker rules <name> destination-hip  [ <destination-hip1> <destination-hip2>... ]
set vsys <name> rulebase network-packet-broker rules <name> traffic-type
set vsys <name> rulebase network-packet-broker rules <name> traffic-type tls-decrypted <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> traffic-type tls-encrypted <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> traffic-type non-tls <yes|no>
set vsys <name> rulebase network-packet-broker rules <name> action
set vsys <name> rulebase network-packet-broker rules <name> action packet-broker-profile <value>