Does Batfish support Palo (individual devices)

[mthomati]

Hi. I’m looking into including Palo Alto network configs with our snapshot, however, I don’t see a lot of use cases and the documentation isn’t correct.

Based on the documentation (https://batfish.readthedocs.io/en/latest/formats.html#palo-alto-networks) for including Palo Alto individual config, the following commands are operational commands, not configuration commands:

show config pushed-shared-policy
show config pushed-shared-policy vsys <value> // run for each vsys
show config merged

Those provided commands will only be displayed in XML. Please advise on the correct commands and instructions to build the necessary config from an individual Palo Alto device. Thanks!

[hochkurz]

Hi, I could get a parsable configuration with the following commands, on a PAN-OS 10.x box:

set cli config-output-format set
set cli pager off
configure
show