If you need to decommission or send in a FIPS-enabled Palo Alto Networks firewall or appliance for repair, you can now scrub the swap memory to remove all cryptographic security parameter (CSP) information from the swap partition(s). Beginning with PAN-OS 8.1.2, you can add the scrub option to the shutdown or restart CLI command as follows: > request [restart | shutdown] system with-swap-scrub [dod | nnsa]

After the scrub completes, a System log is generated that indicates the status of the scrub.