No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules?

Eric_B — Fri, 27 Mar 2026 17:26:04 GMT

I can do this by calling the API manually, but I can't seem to use the operation command module.

curl --location --globoff 'https://<Panorama-IP>/api/?type=op&cmd=<show><system><info></info></system></show>&target=0123456789&key=<your-api-key>'

Skrting the issue in Ansible:

- name: Run an op command on a firewall from Panorama ansible.builtin.uri: url: "https://{{ ip_address }}/api/?type=op&target={{ active_fw_serial }}&cmd={{ policy_match_xml | urlencode }}&key={{ panorama_api_key }}"

Maybe I am missing something, but a quick look at the Python doesn't look like I can use the module for this. To have to manage another set of access, credentials, etc, to reach the firewalls directly for operational commands feels a bit off.

Re: No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules?

ozheng — Mon, 30 Mar 2026 03:09:53 GMT

Hello @Eric_B

First of all, as a disclaimer, I'm not an expert in ansible.

I just looked the doc of the Ansible available modules.

- panos_op
https://galaxy.ansible.com/ui/repo/published/paloaltonetworks/panos/content/module/panos_op/

- panos_type_cmd

https://galaxy.ansible.com/ui/repo/published/paloaltonetworks/panos/content/module/panos_type_cmd/

For both modules, I see there is the "serial_number" which can be used for the target.

Have you explored that?

Olivier

topic No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules? in Panorama Discussions

No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules?

Re: No way to use target to send an op command to a firewall from Panorama using the supported Ansible modules?