Global Protect API to generate ticket

dpeterson4 — Thu, 01 Nov 2018 19:27:42 GMT

Anyone had any luck with the following API call.

Trying to make front end for the helpdesk to be able to generate tickets to disable global protect if needed.

api/?type=op&cmd=<request><global-protect-portal><ticket><request></request></ticket></global-protect-portal></request>&key=APIKEY

I keep getting the following response

<msg>

<line>

op command for client sslvpn timed out as client is not available

</line>

</msg>

</response>

Any help would be appreciated.

Thank you,

-Dustin

Re: Global Protect API to generate ticket

LucasGallagher — Wed, 20 Feb 2019 18:17:57 GMT

This was a goal for us as well, creating a utility that our help desk could use without having to have knowledge of or login via the Panorama interface. Here are the steps we took to achieve this:

Panorama > Admin Roles - Created an Admin Role with the following permissions
1. WebUI permissions - ONLY Network > GlobalProtect > Portals
2. XML API - ONLY Operational Requests
Panorama > Administrators - Created an Administrator account for the tool to use
Generated an API key using said account

In the script the following API call worked to generate a ticket:

api/?type=op&cmd=<request><global-protect-portal><ticket><duration>durationInMinutes</duration><portal>portalName</portal><request>0000-0000</request></ticket></global-protect-portal></request>&key=apiKey

Hope that helps!

topic Re: Global Protect API to generate ticket in Automation/API Discussions

Global Protect API to generate ticket

Re: Global Protect API to generate ticket