To see this working, head to your live site.

palo alto CLI vulnerability protection profile exception

in General discussion

Can exceptions to the vulnerability protection profile be seen via cli?

2 answers4 replies

Comments (6)

Commenting on this post isn't available anymore. Contact the site owner for more info.

Reaper

Nov 23, 2020

also:

reaper@PANgurus> set cli config-output-format set

reaper@PANgurus> configure

Entering configuration mode

[edit]

reaper@PANgurus# show | match threat-exception

Unknown member

Nov 24, 2020

Replying to

Unfortunately this showed nothing:

reaper@PANgurus> set cli config-output-format set

reaper@PANgurus> configure

Entering configuration mode

[edit]

reaper@PANgurus# show | match threat-exception

[edit]

reaper@PANgurus#

Reaper

Nov 24, 2020

Replying to

@onerobertone for multivsys do :

reaper@PANgurus> set cli config-output-format set

reaper@PANgurus> configure

Entering configuration mode

[edit]

reaper@PANgurus# show vsys vsysN | match threat-exception

(where vsysN = vsys1, vsys2, vsys3, etc. )

Reaper

Nov 23, 2020

sure thing

> show profiles vulnerability <profilename> threat-exception

Unknown member

Nov 24, 2020

Replying to

Any iteration of that came back with Invalid syntax.

Reaper

Nov 24, 2020

Replying to

@onerobertone first: whoops, it's supposed to be # (config mode) secondly: you're on a multivsys system, so the command will be a tad different, see below

Forum: Forum