topic PANOS 6.0 XML - set failed? in Automation/API Discussions

PANOS 6.0 XML - set failed?

lee_noc — Fri, 08 Aug 2014 00:15:39 GMT

Hello all,

I am trying to edit/set a security rule using the XML API. So far i have the following: https://x.x.x.x/api/?type=config&action=set&key=hiddenkeyhere&xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='Rule 1-1-1-1-1']/&element=<from><member>inside</member></from>

sadly all I get in return is "set failed, may need to override template object first". When I change the action from set to override I get another error. I am sure that this rule and element did not get inherited from a template.

I went into the CLI and issued the set command there and it works perfectly. Just to make sure I formatted the element properly I turned on cli debugging so I could see what needs to be in the element section, below is the output:

<request cmd="set" obj="/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='Rule 1-1-1-1-1']" cookie="xxxxxxxxxxxxxxxxx"><from><member>inside</member></from></request>

Has anyone overcome this issue with setting elements for security rules? If so, how?

Thanks in advanced!

Re: PANOS 6.0 XML - set failed?

Sai_Tumuluri — Tue, 19 Aug 2014 01:21:09 GMT

Can you remove "/" between xpath and element like

http(s)://hostname/api/?type=config&action=set&key=keyvalue&xpath=xpath-value&element=element-value

Re: PANOS 6.0 XML - set failed?

dsouthard — Sat, 30 Aug 2014 15:01:16 GMT

Hi Lee,

not sure what point release of 6 you're on, but i upgraded from 5 to 6.0.4 today and had the same error message when attempting to add members to address-groups (which broke all my auto-blocking code lol) - in that instance i found i was missing a <static> keyword around the member entry (ill raise a support call on monday with my reseller as an FYI), but in your case, im afraid i dont get the same error and the api call completes successfully..

https://x.x.x.x/api/?type=config&action=set&xpath=/config/devices/entry/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='Rule 1-1-1-1-1']&element=<from><member>inside</member></from>&key=hiddenkeyhere

<response status="success" code="20"><msg>command succeeded</msg></response>

cheers

damian