topic push scope > Prisma access > remote networks using api (Panorama-managed) in Prisma Access Discussions

push scope > Prisma access > remote networks using api (Panorama-managed)

sa_z — Fri, 06 Mar 2020 15:54:34 GMT

Hi,

I am writing a script in python using pan-python module to automate Prisma Access onboarding. I can create all kinds configurations and commit changes to Panorama, but I can't seem to find "push to devices" for Prisma access in the API, which is the main purpose of this automation!

Has anyone done it before or have an idea on how to push to Prisma with API?

try:
xapi.commit(cmd="<commit-all></commit-all>", action=all, sync=False, interval=None, timeout=None)
except pan.xapi.PanXapiError as msg:
print('commit: ', msg, file=sys.stderr)
sys.exit(1)

Cheers,

Re: push scope > Prisma access > remote networks using api (Panorama-managed)

nembery — Wed, 18 Mar 2020 13:51:48 GMT

Hi there S,

Please try this:

self.xapi.commit(action='all',
                 cmd='<commit-all><shared-policy><device-group>'
                     '<entry name="Remote_Network_Device_Group"/>'
                     '</device-group></shared-policy></commit-all>')

Note, this was last tested with GPCS about a year ago, and there have been some changes, so I'm not 100% sure this will work as-is for you. Good luck and let us know if this works for you.

HTH,

Nate

Re: push scope > Prisma access > remote networks using api (Panorama-managed)

sa_z — Wed, 18 Mar 2020 14:19:41 GMT

Hi Nate,

Thanks for your answer! I already found a solution.

Your code is almost correct. The cmd=<commit-all>...</commit-all> would NOT work. The action should be set to all and the cmd should be <commit>...</commit>

Thanks,