𝗧𝗼𝗽 𝗖𝗟𝗜 𝗖𝗼𝗺𝗺𝗮𝗻𝗱𝘀 - 𝗣𝗮𝗹𝗼 𝗔𝗹𝘁𝗼 𝗘𝗻𝗴𝗶𝗻𝗲𝗲𝗿 ......

 

If you’re working on firewalls and not using CLI effectively…

👉 You’re slowing down troubleshooting.

GUI is good.
But CLI is where real engineers solve incidents fast.

Here are the most useful CLI commands 👇

---

🧠 𝗦𝗘𝗦𝗦𝗜𝗢𝗡 𝗧𝗥𝗢𝗨𝗕𝗟𝗘𝗦𝗛𝗢𝗢𝗧𝗜𝗡𝗚

🔹 show session all filter source <IP>
Check session creation

🔹 show session id <session-id>
Deep dive

🔹 show session info
Session statistics

---

🌐 𝗥𝗢𝗨𝗧𝗜𝗡𝗚 & 𝗙𝗢𝗥𝗪𝗔𝗥𝗗𝗜𝗡𝗚

🔹 show routing route
Routing table

🔹 show routing fib
Forwarding path

🔹 test routing fib-lookup virtual-router <vr> ip <destination>
Route validation

---

🔄 𝗡𝗔𝗧 𝗩𝗔𝗟𝗜𝗗𝗔𝗧𝗜𝗢𝗡

🔹 test nat-policy-match from <zone> to <zone> source <IP> destination <IP> protocol <protocol>
NAT rule check

🔹 show running nat-policy
View NAT rules

---

🔥 𝗡𝗔𝗧 𝗣𝗢𝗢𝗟 & 𝗥𝗘𝗦𝗢𝗨𝗥𝗖𝗘 𝗔𝗡𝗔𝗟𝗬𝗦𝗜𝗦

🔹 show running ippool
NAT usage

🔹 show running nat-rule-ippool rule <rule-name>
Rule-level allocation

🔹 show running global-ippool
Global NAT usage

💡 Useful during NAT exhaustion

---

🔐 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬 𝗣𝗢𝗟𝗜𝗖𝗬 𝗖𝗛𝗘𝗖𝗞

🔹 test security-policy-match from <zone> to <zone> source <IP> destination <IP> protocol <protocol>
Rule match

---

📊 𝗖𝗢𝗨𝗡𝗧𝗘𝗥𝗦 & 𝗗𝗥𝗢𝗣 𝗔𝗡𝗔𝗟𝗬𝗦𝗜𝗦

🔹 show counter global filter severity drop
🔥 Drop reasons

🔹 show counter global filter packet-filter yes delta yes
Live drops

---

⚙️ 𝗦𝗬𝗦𝗧𝗘𝗠 & 𝗛𝗘𝗔𝗟𝗧𝗛 𝗖𝗛𝗘𝗖𝗞

🔹 show system info
Device info

🔹 show running resource-monitor
CPU & memory

🔹 show running resource-monitor ingress-backlogs
Buffer issues

🔹 show system resources
🔥 Process-level usage

🔹 show jobs all
Commit status

---

🌍 𝗗𝗡𝗦 & 𝗖𝗢𝗡𝗡𝗘𝗖𝗧𝗜𝗩𝗜𝗧𝗬

🔹 ping host <IP>
🔹 traceroute host <IP>
🔹 test dns-proxy dns-server <IP> host <domain>

Check reachability & DNS

---

💡 𝗙𝗶𝗻𝗮𝗹 𝗧𝗵𝗼𝘂𝗴𝗵𝘁

👉 “Knowing commands is good.
👉 Knowing when to use them is what makes you an L3 engineer.”

---

📘 𝗪𝗲 𝗵𝗮𝘃𝗲 𝗰𝗿𝗲𝗮𝘁𝗲𝗱 𝟮 𝗣𝗮𝗹𝗼 𝗔𝗹𝘁𝗼 𝗱𝗼𝗰𝘂𝗺𝗲𝗻𝘁𝘀:

1️⃣ 𝗣𝗮𝗹𝗼 𝗔𝗹𝘁𝗼 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 𝗜𝗻𝘁𝗲𝗿𝘃𝗶𝗲𝘄 𝗠𝗮𝘀𝘁𝗲𝗿 𝗚𝘂𝗶𝗱𝗲

- Contains 320+ questions with answers
- Covers basics, advanced topics, and scenario-based questions
- Helps professionals crack Palo Alto technical interviews confidently

2️⃣ 𝗣𝗮𝗹𝗼 𝗔𝗹𝘁𝗼 𝗧𝗿𝗼𝘂𝗯𝗹𝗲𝘀𝗵𝗼𝗼𝘁𝗶𝗻𝗴 𝗣𝗹𝗮𝘆𝗯𝗼𝗼𝗸

- Covers 25 real-time scenario-based issues
- Includes detailed troubleshooting steps and resolutions
- Helps you understand and handle production-level issues effectively