Monday, July 20, 2026

Reboot Palo Alto Firewall via Command Line

 To reboot a Palo Alto Networks firewall from the CLI, log in via SSH or the console with an administrator account and run:

> request restart system

The firewall will prompt for confirmation:

Warning: executing this command will restart the system.
Do you want to continue? (y or n)

Type:

y

The firewall will then reboot. Existing sessions will be terminated, you'll be logged out, and any uncommitted configuration changes will be lost.

If the firewall is part of an HA pair

Avoid rebooting the active firewall first. A typical process is:

  1. Check the HA status:

    > show high-availability state
  2. Reboot the passive firewall:

    > request restart system
  3. Verify it has returned to the passive state.
  4. If desired, perform a failover and then reboot the other firewall.

Reboot vs. Shutdown

  • Reboot:

    > request restart system
  • Graceful shutdown (requires physically powering the device back on):

    > request shutdown system

No comments:

Post a Comment

PALO ALTO FIREWALL STUDY GUIDE

PALO ALTO FIREWALL STUDY GUIDE 1. Palo Alto Networks Firewall Overview What is Palo Alto Firewall? A Palo Alto Networks Next-Generation Fire...