Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementMedium

A network administrator needs to verify the current software version, content version, and license status of a Palo Alto Networks firewall to troubleshoot a content update issue. Which CLI command provides this comprehensive device information?

  1. Ashow system state
  2. Bshow running-config
  3. Cshow system info
  4. Dshow license
Show answer & explanation

Correct answer: C. show system info

The 'show system info' command provides a summary of the firewall's system information, including the PAN-OS version, content version (Antivirus, Applications and Threats, WildFire), serial number, and license status. This is the most comprehensive single command for the requested information.

Why the other options are wrong

  • A. 'show system state' provides detailed internal operational state information, which is usually more granular than what's needed for a quick overview of versions and licenses.
  • B. 'show running-config' displays the active configuration, not system information like software versions or license status.
  • D. 'show license' specifically shows license details, but not the software or content versions in a single output.

CLI System Info Command

The 'show system info' CLI command on a Palo Alto Networks firewall, used to display a summary of device software, content, and license information.

  • Provides PAN-OS version, content versions, serial number.
  • Includes license status (e.g., valid, expired).
  • Useful for initial checks and troubleshooting.

Memory trick: To quickly 'see' everything about the firewall's 'system', just 'show system info'.

More Initial Configuration and Management questions