Can the PAN-OS API be used with Prisma Access?

TFukumoto5 — Mon, 06 Dec 2021 05:55:51 GMT

Currently, a system using the PAN-OS firewall is in operation. In this environment, we are operating using PAN-OS API Scripts.

If I migrate this environment to Prisma Access, can I use the API Scripts that I used in operation?

Is there a way to check if API Scripts can be used without using Prisma Access?

Thank you in advance.

Re: Can the PAN-OS API be used with Prisma Access?

PavelK — Tue, 07 Dec 2021 22:54:44 GMT

Thank you for posting question @TFukumoto5

There are 2 ways to manage Prisma Access. One option is to use the plugin for Panorama. In this case you can leverage Panorama API to manage Prisma Access: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/prisma-access-apis.html

Second option is to use Prisma Cloud Management. Based on my information the Prisma Cloud Manager will be getting full API support before end of this year or in January 2022. As of now, it is possible only to retries IP addresses by API and nothing else: https://docs.paloaltonetworks.com/prisma/prisma-access/prisma-access-panorama-admin/prisma-access-overview/retrieve-ip-addresses-for-prisma-access

Kind Regards

Pavel