topic Re: Not appending new address object in address group through REST API in Next-Generation Firewall Discussions

Not appending new address object in address group through REST API

ShaileshKum — Wed, 13 Nov 2024 11:56:47 GMT

We have been trying to append a new address object to an address group in the firewall. However, when we use the PUT method in Postman to insert it into the group, it replaces the existing address objects instead of adding the new one. Additionally, using the POST method results in an error.

Re: Not appending new address object in address group through REST API

TomYoung — Wed, 13 Nov 2024 14:26:55 GMT

Hi @ShaileshKum ,

You cannot append with the REST API. You would need to modify your script to read the members of the address group, append your new value, and replace the contents.

REST typically only does CRUD operations. Here are the supported REST and HTTP methods:

Create = Post
Read = Get
Update = Put
Delete = Delete
Rename = Post
Move (policy only) = Post

https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-panorama-api/get-started-with-the-pan-os-rest-api/methods-supported-rest-api#id8f0d57ab-ff2b-482a-913f-eb4f84525803

Thanks,

Tom

Re: Not appending new address object in address group through REST API

ShaileshKum — Mon, 18 Nov 2024 03:49:45 GMT

Hi @TomYoung

Thanks for your reply! Usually, when we add an object to a group, we need to copy a previous object and paste it when adding a new object.

Re: Not appending new address object in address group through REST API

ShaileshKum — Fri, 22 Nov 2024 09:09:41 GMT

Is there any other option? Currently, when we create a new object, we copy all the properties of an old object and paste them into the new one

Re: Not appending new address object in address group through REST API

TomYoung — Fri, 22 Nov 2024 20:48:29 GMT

Hi @ShaileshKum ,

It should be possible with the XML API using the set action. See this post which has an example of appending an application to a security policy rule. https://live.paloaltonetworks.com/t5/panorama-discussions/add-or-remove-application-in-a-security-rule/m-p/560142

Thanks,

Tom