Query Palo Alto Firewall PA-5020 using Firemon

padkumar4 — Thu, 08 May 2014 15:10:06 GMT

I am working on integrating Firemon with Palo Alto and need to query the Palo Alto for zones. Here's what I am trying to do.

Problem statement: I want to write a query that would give me the list of firewall rules with ("any" in "Destination zone" AND "Service" AND "Action" = accept ).

I am able to generate a query that will give me ("any" in "Destination zone" AND "Service" AND "Action" = accept) which is given below:

query: rule{disabled=false and destination.any = true and (application.any=true or application.objectcount is empty) and service.any=true and action='ACCEPT'}

This query works and give me the list of all rules with destination = any. How can I change it to destination zone =any.

Thanks

Padma

topic Query Palo Alto Firewall PA-5020 using Firemon in Automation/API Discussions

Query Palo Alto Firewall PA-5020 using Firemon