topic Re: Need script to kill a session in Automation/API Discussions

Need script to kill a session

Roby_Sreejith — Thu, 17 Nov 2016 14:23:41 GMT

I need to kill a session automatically for one appplication when this application appears on one egress interface.

We have PBF rule for forcing some application to one ISP and virtual router for other ISP.

once the PBF ISP is down, it goes to second ISP via virtual router.

For some application it stays in that ISP for a long time untill we manually kill it.

Is there any way to kill the these sessions everyday . Now we manually clear every day morning

Re: Need script to kill a session

Roby_Sreejith — Wed, 30 Nov 2016 12:21:00 GMT

Re: Need script to kill a session

Roby_Sreejith — Wed, 21 Dec 2016 09:43:53 GMT

The API job should be like this

1) identify the application or ort traffic

2 See if it comes on one egress interface

3) If come son this interface kill or clear the session.

Any idea

Re: Need script to kill a session

Roby_Sreejith — Thu, 23 Mar 2017 07:36:35 GMT

Lets make more simple what should be the manual api command to clear an application traffic which goes out through one specific interface. Then as next step i can think about automating this.

Re: Need script to kill a session

nigelswift — Thu, 23 Mar 2017 12:55:19 GMT

You'd do an XML API call for <show><session><all><filter></filter></all></session></show> for both application and egress-interface then pass the ID's into <clear><session><id></id></session></clear> in a for loop.

It'd be easy enough to automate it by querying once every n seconds and checking if the value of the first call returns any jobs.

Re: Need script to kill a session

Roby_Sreejith — Mon, 03 Apr 2017 12:56:44 GMT

How can i pass the session id automatically to this script of killing

Re: Need script to kill a session

nigelswift — Wed, 05 Apr 2017 00:57:16 GMT

Poll for matching sessions with your filter and pass it into a for loop through your favorite scripting language which clears each session.

Re: Need script to kill a session

Roby_Sreejith — Wed, 19 Apr 2017 05:35:13 GMT

May be a basic question , However i have never tred API in loop level is it possible to run this type of script in some interval like 4 hours etc. in Palo Alto, where we need to schedule this, any sample loop configuration which runs in every interval