topic Re: Python script to retrieve unsued/ zero hits security policy on PAN firewall in Automation/API Discussions

Python script to retrieve unsued/ zero hits security policy on PAN firewall

sandeep.paul — Sat, 23 Dec 2017 12:09:38 GMT

I an new to automation though worked on cisco automation before, want to know any basic scripts for PAN firewalls with Python.

Note: New idea are welcome

Re: Python script to retrieve unsued/ zero hits security policy on PAN firewall

gfreeman — Tue, 16 Jan 2018 17:16:20 GMT

As of PANOS 8.0, there is no rule hit count for policies.

Re: Python script to retrieve unsued/ zero hits security policy on PAN firewall

gfreeman — Tue, 16 Jan 2018 17:37:26 GMT

Nevermind, there's a whole article devoted to this topic:

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Unused-Policies-on-a-Palo-Alto-Networks-Device/ta-p/53202

Re: Python script to retrieve unsued/ zero hits security policy on PAN firewall

ajr0 — Thu, 15 Mar 2018 19:37:31 GMT

8.1 now has this available in gui

should be fairly straightforward to use xml api to find xpath to make python script

Re: Python script to retrieve unsued/ zero hits security policy on PAN firewall

JoeAndreini — Tue, 20 Mar 2018 19:44:25 GMT

Unused rules are easy, either through the web GUI or the CLI. It should be possible to run the CLI command via the API as an "operational command" call.

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Unused-Policies-on-a-Palo-Alto-Networks-Device/ta-p/53202