How to count total FQDN objects on PanOS firewalls?
157
Created On 08/01/22 09:37 AM - Last Modified 11/17/25 20:32 PM
Objective
- How to count total FQDN objects on PanOS firewalls?
On the firewall GUI-->Objects-->Addresses, the list contains both IP based address objects as well as FQDN objects. This article talks about a method of finding total FQDN objects configured on a firewall.
Environment
- All PanOS firewalls configured with FQDN objects.
Procedure
- Firewall is not managed by Panorama:
- Export running config from FW GUI-->Operations-->Export named configuration snapshot
- Open the xml file in Notepad++ or browser.
- Using the CTRL+F feature of Notepad++ or any Browser, one can find the total FQDN objects configured.
- If tech-support file is available on SHORTS, use following commands to count the FQDN objects:
less opt/pancfg/mgmt/saved-configs/running-config.xml | grep "fqdn loc" | wc -l
- If firewall is managed by Panorama, use .merged-running-config.xml instead of running config and follow the same process as above.