topic Configuration to Export Address and Address Objects in Automation/API Discussions

Configuration to Export Address and Address Objects

Thomas8240 — Mon, 28 Aug 2017 15:42:49 GMT

I would like to review the addresses and address groups on our PA. I was trying to use the article “How to Export Address and Address-group Objects Using PAN-OS API” from the link below to display the address objects and address groups.

https://live.paloaltonetworks.com/t5/Tutorials/How-to-Export-Address-and-Address-group-Objects-Using-PAN-OS-API/ta-p/58622

Our current configuration is as follows:

Model: PA-5080
Software Version: 7.1.8
Access is via a network port.
No Cert on the PA
ID is read-only

What is the required configuration?

ID Type: Read-only, must have Admin configuration access, Other?
Certificate required on PA?
What version of Excel is used? g. Excel 2010 or 2013 or other
Other??

Please advise,

Re: Configuration to Export Address and Address Objects

nigelswift — Mon, 28 Aug 2017 15:52:24 GMT

ID Type: Read-only, must have Admin configuration access, Other?

The admin role used to generate the API key will need to have XML API > Operational Requests permissions

Certificate required on PA?

This would depend on your client computer's certificate trust store. If you are doing server certificate validation on the client, then it would need to trust the certificate used by the firewall's management interface.

What version of Excel is used? g. Excel 2010 or 2013 or other

Based on some Microsoft documentation, it appears web queries are supported for 2010 and newer.

https://support.office.com/en-us/article/Get-external-data-from-a-Web-page-708f2249-9569-4ff9-a8a4-7ee5f1b1cfba