topic Palo Alto Mock server for API testing in Next-Generation Firewall Discussions

Palo Alto Mock server for API testing

VivekC — Tue, 10 Dec 2024 07:27:30 GMT

Hi Support,

We are developing a API connector to pull Traffic logs from Palo Alto firewall.
Do you guys have any mock server to test the rest API?

Re: Palo Alto Mock server for API testing

S.Cantwell — Tue, 10 Dec 2024 20:12:28 GMT

Good Day

The representatives on the Live Community are not always PANW employees.
We are a community of PANW users of their technology and seek to provide knowledge, techncial assistance, and recommendations.

I am not aware of a public FW or mock server to test with.

Perhaps you can communicate your request to a local PANW SE who can provide you a 30 day license for a virtual firewall, so you may perform testing.

Thank you.

Re: Palo Alto Mock server for API testing

BPry — Wed, 11 Dec 2024 22:38:34 GMT

@VivekC,

You're best bet if you don't already have a relationship with PAN is to simply spin up a VM series firewall on one of the public clouds and generate some logs to use for validation. If you have a relationship already, your SE can get you a trial license so you can use that as a sandbox. While there are some ways to get limited time on public VMs for education purposes, they wouldn't really fit your purpose here.

Also just as an FYI, if you're looking to pull logs you would need to utilize the XML API instead of REST. The REST API is extremely limited in capability and doesn't currently include the ability to access logs on the device. Most log integrations are going to utilize log forwarding instead of relying on the API capability built into the firewall; unless you have a limited use case (like looking for very targeted logs) I generally wouldn't recommend using the API to stream logs into another solution.