How to check config size of the firewall ?

How to check config size of the firewall ?

14381
Created On 08/05/22 13:28 PM - Last Modified 11/22/23 05:22 AM


Objective


The article explains how to check the configuration size on the Palo Alto Firewall.

Note: The information provided is not applicable on Panorama.


Environment


  • Palo Alto Firewalls
  • Supported PAN-OS 10.0.0 and later

 


Procedure


Option 1: 
  1. Navigate to the CLI of the firewall 
  2. Execute the following command to get the size for the last committed change 
> show management-server last-committed config-size
Note: Output would look like below
> show management-server last-committed config-size
491166 bytes
           And the following command gives the size of the candidate config-size     
> show management-server candidate config-size
15255564 bytes

Option 2:
  1. Generate and Download techsupport file from the firewall.
  2. Unzip the techsupport file.
  3. Navigate to \opt\pancfg\mgmt\tmp\panorama_pushed
  4. If configuration is pushed by Panorama then check the size of mergesp.xml
  5. If entire configuration is local to firewall and not from Panorama then check the size of running-config.xml 

 



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000wlF4CAI&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language