How to check config size of the firewall ?
14381
Created On 08/05/22 13:28 PM - Last Modified 11/22/23 05:22 AM
Objective
The article explains how to check the configuration size on the Palo Alto Firewall.
Note: The information provided is not applicable on Panorama.
Environment
- Palo Alto Firewalls
- Supported PAN-OS 10.0.0 and later
Procedure
Option 1:
- Navigate to the CLI of the firewall
- Execute the following command to get the size for the last committed change
> show management-server last-committed config-size
Note: Output would look like below
> show management-server last-committed config-size
491166 bytes
And the following command gives the size of the candidate config-size
> show management-server candidate config-size 15255564 bytes
Option 2:
- Generate and Download techsupport file from the firewall.
- Unzip the techsupport file.
- Navigate to \opt\pancfg\mgmt\tmp\panorama_pushed
- If configuration is pushed by Panorama then check the size of mergesp.xml
- If entire configuration is local to firewall and not from Panorama then check the size of running-config.xml