Palo Alto Networks Knowledgebase: CLI Commands to Clear, Show, Enable and Disable the Application Cache

CLI Commands to Clear, Show, Enable and Disable the Application Cache

7175
Created On 02/07/19 23:51 PM - Last Updated 02/07/19 23:52 PM
Device Management Initial Configuration Installation QoS Zone and DoS Protection
Resolution

Details

  • Command to clear the application cache:

    > debug dataplane reset appid cache


  • Command to show running application cache:

    > show running application cache


    APPID CACHE

    IP[PORT]                 PROTO  APPID     COUNT     THRESHOLD  HITS      TIMEOUT

    172.28.18.1[22]          6      37        1         16         0         28    


    HEURISTIC CACHE

    SRC[PORT]                DST[PORT]                PROTO  APPID     COUNT     VALID


  • Command to stop application caching for newly created sessions:

    > set application cache no

       Application cache is set to be no


  • Command to enable application caching:

    > set application cache yes

       Application cache is set to be yes

    Note: Every application needs to be examined, which may affect throughput on the Palo Alto Networks device.

  • Command to verify application caching is disabled:

    > show running application setting

              Application setting:

              Application cache             : no

              Supernode                     : yes 

              Heuristics                    : yes

              Cache Threshold               : 16

              Bypass when exceeds queue limit: yes

              Traceroute appid              : yes

              Traceroute TTL threshold      : 30

              Use cache for appid           : no

              Unknown capture               : on

              Max. unknown sessions         : 5000

              Current unknown sessions      : 0

              Application capture           : off

    Current APPID Signature

       Signature Usage            : 21  MB (Max. 32  MB)

          TCP 1 C2S               : 15335  states, in offloader

          TCP 1 S2C               : 4824   states, in offloader

          TCP 2 C2S               : 2312   states, in offloader

          TCP 2 S2C               : 728    states, in offloader

          UDP 1 C2S               : 12832  states, in offloader

          UDP 1 S2C               : 3288   states, in offloader

          UDP 2 C2S               : 636    states, in offloader

owner: panagent



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClMdCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language