All things Palo Alto Networks
Home
Articles
Forum
More
Can exceptions to the vulnerability protection profile be seen via cli?
also:
reaper@PANgurus> set cli config-output-format set
reaper@PANgurus> configure
Entering configuration mode
[edit]
reaper@PANgurus# show | match threat-exception
Unfortunately this showed nothing:
reaper@PANgurus#
@onerobertone for multivsys do :
reaper@PANgurus# show vsys vsysN | match threat-exception
(where vsysN = vsys1, vsys2, vsys3, etc. )
sure thing
> show profiles vulnerability <profilename> threat-exception
Any iteration of that came back with Invalid syntax.
@onerobertone first: whoops, it's supposed to be # (config mode) secondly: you're on a multivsys system, so the command will be a tad different, see below
also:
reaper@PANgurus> set cli config-output-format set
reaper@PANgurus> configure
Entering configuration mode
[edit]
reaper@PANgurus# show | match threat-exception
sure thing
> show profiles vulnerability <profilename> threat-exception