topic Re: VPN and XML Api in Automation/API Discussions

VPN and XML Api

mjessee — Tue, 17 Jan 2012 15:53:00 GMT

I need to get the list of current users of VPN for a vsys and how to kill (force logout) a particular user, using the XML Api. Does anyone know how to do these two things?

Thanks!

Re: VPN and XML Api

SRA — Tue, 17 Jan 2012 23:12:49 GMT

What PAN-OS version are you using? Operational commands are available in the XML API from 4.1. You can use:

http(s)://firewall//api/?type=op&cmd=<show><global-protect-gateway><current-user></current-user></global-protect-gateway></show>

Re: VPN and XML Api

mjessee — Wed, 18 Jan 2012 05:57:32 GMT

We are currently on 4.0.8 so we can't use the op cmd. Is there something in our version to allow us to both see the current VPN users and then to kill (force logoff) one or all VPN users?

Re: VPN and XML Api

SRA — Wed, 18 Jan 2012 23:31:35 GMT

Not via the API. You could perhaps try an expect script to use the CLI instead.