amigan_99
asked on
Palo Alto Networks Security Rule Additions via CLI - multiple objects
I'm seeing some general information about adding security rules via the PAN CLI. But specifically - suppose I want to have three destination IPs in a rule instead of one - how would I make that happen. Like this? (Guessing). Brackets and the spaces good enough? Commas needed? Other??
set rulebase security rules SANBRUNO-Out destination [7.12.8.224 7.12.8.225 7.12.8.226]
A single host would be added like this
set rulebase security rules SANBRUNO-Out destination 7.12.8.224
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-View-Create-and-Delete-Security-Policies-on-the-CLI/ta-p/52494
set rulebase security rules SANBRUNO-Out destination [7.12.8.224 7.12.8.225 7.12.8.226]
A single host would be added like this
set rulebase security rules SANBRUNO-Out destination 7.12.8.224
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-View-Create-and-Delete-Security-Policies-on-the-CLI/ta-p/52494
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Great thank you
ASKER
set rulebase security rules SANBRUNO-Out destination 7.12.8.224
set rulebase security rules SANBRUNO-Out destination 7.12.8.225
set rulebase security rules SANBRUNO-Out destination 7.12.8.226
..which would be in line with the example in the PAN Live Community URL:
set rulebase security rules rashi application adobe-meeting-remote-contr
set rulebase security rules rashi application adobe-meeting
set rulebase security rules rashi application adobe-online-office
Can anyone confirm? Thank you.