topic Re: How to start with pandievice and API in Automation/API Discussions

How to start with pandievice and API

BatD — Fri, 25 Jan 2019 10:20:49 GMT

Hi all, I feel a bit stupid asking the question, but surely, others had the same problem as me.

I am trying to create multiple address objects, service objects and rules from a CSV file input.

People are recommending using “pandevice”, however reading the documentation, it kind of assumes that the user is fluent with python. I did a lot of reading, but I am failing at just the basics of how to setup the python environment and create a script. Is there a simple guide of how to do, if you don’t have any python knowledge?

Re: How to start with pandievice and API

gfreeman — Sat, 26 Jan 2019 00:16:25 GMT

Hey, just trying to clarify: are you asking for help getting a basic pandevice script to work? Or are you asking for help setting up python itself in your environment?

Re: How to start with pandievice and API

BatD — Mon, 28 Jan 2019 07:55:06 GMT

Thank you for your response @gfreeman

I have some scripting understanding, but no Python knowledge and was looking for some simpler scripts which I can then modify. Reading the pandevice documentation makes sense, but I am a bit lost of how to actually practiclly use the modules. There are some examples in the pandevcie github page, but they seem to be a bit more complicated with some advanced functions and checks.

I am just looking for crating bulk configuration items taking variables from file input. For example, a few hundred secruity polices from excel/csv file paramters.

I guess then principally it will be the same for any other configuration item, e.g. address and service objects.

Re: How to start with pandievice and API

BatD — Mon, 04 Feb 2019 17:21:52 GMT

Can anyone assist? Let me rephrase the question: can you please recomend a method of creating a large amount of security policy from csv input file?

Re: How to start with pandievice and API

gfreeman — Mon, 04 Feb 2019 18:16:23 GMT

Ok, so python has a csv module. You use that to parse the csv file, then using pandevice to create the security policies. So let me give the pandevice code you'll be using once you've parsed the csv file itself. In this example, the variable configs is a list of the parsed values from the csv file, and each entry in configs is a python dict, where the key is the security rule parameter name, and the value is the value for that security rule.

from pandevice.firewall import Firewall
from pandevice.policies import Rulebase, SecurityRule

# Connect to the firewall.
fw = Firewall(hostname, username, password)

# Security rules are children of a rulebase, so create the rulebase object and
# add it to the firewall as a child object.
rb = Rulebase()
fw.add(rb)

# Load up the "configs" value here.  Each entry in "configs" is a python dict, but you could
# also just make it a list, it's up to you.
configs = []

# Now just iterate over each security rule and add it to the firewall.
for con_dict in configs:
    rule = SecurityRule(**con_dict)
    rb.add(rule)
    rule.create()

# Commit only after you're sure the above code works.
#fw.commit(sync=True)

Re: How to start with pandievice and API

BatD — Wed, 06 Feb 2019 07:51:39 GMT

@gfreeman Thank you for your reponse. It gives me better understanding and a good place to start. I will spend some time working on that over the next week.