topic Re: I need to upload response page in Next-Generation Firewall Discussions

I need to upload response page

Indranil-Chowdhury — Mon, 09 Oct 2023 16:31:00 GMT

I am currently in the process of planning to upload a custom webpage to my Palo Alto device. However, I would like to automate this process through an API call. I have the HTML content for the webpage stored in a variable and I would like to upload it to the following path. Any references or suggestions in this regard would be greatly appreciated.

The manual update path is as follows:

Device -> Response Page -> URL Filtering and Category Match Block Page

There is already one predefined file in place, so if there's a way to update that without uploading a new file, that would also be acceptable for me.

I would be very grateful for any suggestions or assistance. Thank you in advance.

Re: I need to upload response page

TomYoung — Mon, 09 Oct 2023 20:13:47 GMT

Hi @Indranil-Chowdhury ,

Here is an example for the application block page. https://live.paloaltonetworks.com/t5/api-articles/modify-response-pages-from-xml-api/ta-p/62167

You would only need to modify the syntax to do the same for the URL block page.

For drive-by browsers, here is a cool doc on creating custom response pages. https://live.paloaltonetworks.com/t5/blogs/tips-amp-tricks-how-to-customize-your-response-pages/ba-p/450606 That's where I found the example above.

Thanks,

Tom

Re: I need to upload response page

Indranil-Chowdhury — Thu, 12 Oct 2023 05:15:18 GMT

Thankyou so much for your response.

I am preparing the script for uploading the HML page to box under url category.
I need help to understand where i am going wrong here. I am sharing code below.

$deviceUrl = "https://1.2.3.4:4443/esp/restapi.esp?key=" + $retrieve_token

$htmlContent = @"
<!DOCTYPE html>
<html>
<head>
<title>Custom Response Page</title>
</head>
<body>
<h1>This is a custom response page</h1>
<p>Custom content for the response page goes here...</p>
</body>
</html>
"@

# Convert the HTML content to Base64
$htmlContentBase64 = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($htmlContent))

# Define the XML API request body with the encoded HTML content
$xmlRequestBody = @"
<request>
<system>
<response-pages>
<entry name="Application-block-page">
<html-content>$htmlContentBase64</html-content>
</entry>
</response-pages>
</system>
</request>
"@

$response1 = Invoke-RestMethod -Uri $deviceUrl -Method Post -Body $xmlRequestBody -ContentType "application/xml"

Re: I need to upload response page

TomYoung — Thu, 12 Oct 2023 11:00:54 GMT

What error are you getting?

Re: I need to upload response page

TomYoung — Thu, 12 Oct 2023 11:57:51 GMT

Hi @Indranil-Chowdhury ,

If you are not able to discern the error in your code output, I can't help you. I did provide you with the XML URL to upload a page, which you requested.

You could try to use curl or Postman to verify the URL works outside of your script.

Thanks,

Tom

Re: I need to upload response page

Indranil-Chowdhury — Thu, 12 Oct 2023 14:42:47 GMT

can you please help me with curl command to upload the page. It will be helpful.

Re: I need to upload response page

Indranil-Chowdhury — Fri, 25 Oct 2024 10:43:12 GMT

I got the error now. Sorry for the delay in response. I was busy in other assignments and jumping back here. Let me paste my function and the response here. I want to upload in URL FILTERING AND CATAGORY MATCH BLOCK PAGE

def update_webpage_to_device(self, api_key, device_serial😞

URL = f"https://{self.panorama}/api"

# Open the file in binary mode to upload

file_path = "webpage.txt"

with open(file_path, 'rb') as file:

files = {'file': (file_path, file, 'text/html')}

# API parameters for importing the block page

category= "url-block-page"

params = {

"key": api_key,

"type": "import",

"category": "url-block-page",

"target": device_serial

}

try:

# Send the import request to Panorama

response = requests.post(URL, params=params, files=files, verify=False)

print(response.text)

# Check if file was imported successfully

if response.status_code == 200 and "<response status=\"success\">" in response.text:

print(f"{category} imported successfully.")

else:

# Log the error message and attempt a re-upload

print(f"Failed to import {category}. Response: {response.text}")

print("Retrying upload...")

# Re-attempt upload after a delay or with updated params

response = requests.post(URL, params=params, files=files, verify=False)

if response.status_code == 200 and "<response status=\"success\">" in response.text:

print(f"Re-upload successful for {category}.")

else:

print(f"Re-upload failed for {category}. Final response: {response.text}")

except Exception as e:

print(f"An error occurred while updating {category}: {e}")

Result

====

<response status="error"><msg><line>Filename /opt/pancfg/tmp/0000064104 does not exist</line></msg></response>
Failed to import url-block-page. Response: <response status="error"><msg><line>Filename /opt/pancfg/tmp/0000064104 does not exist</line></msg></response>
Retrying upload...
Re-upload failed for url-block-page. Final response: <response status="error"><msg><line>Filename /opt/pancfg/tmp/0000064105 does not exist</line></msg></response>