topic Re: pan-python - How to add an address group to a policy in Automation/API Discussions

pan-python - How to add an address group to a policy

ksomu — Tue, 20 Aug 2013 04:21:50 GMT

I would like to add/change the destination address group in a policy.

xpath=/config/devices/entry[@name='localhost.localdomain']/device-group/entry[@name='testDG']/pre-rulebase/security/rules/entry[@name='Allow_FTP']/destination

element=<destination><member>test_addr</member></destination>

Can you please show me how to achieve this via panxapi.py ? I couldn't find examples/documentation to achieve this.

Thanks,

Krishna

Re: pan-python - How to add an address group to a policy

ksteves1 — Tue, 20 Aug 2013 19:43:35 GMT

If you want to "replace" the 'destination' node, which I think is what

you are trying to do, use edit (-e) with that xpath and element and

it should work.

There is an example in panxapi.html 'Edit the application of a

security rule.' which covers a very similar case.

An area not explained in the XML API documentation is: what is the

difference between set and edit? I cover this a little in

pan.xapi.html and in more detail in some of my API training.