topic Re: test_security_policy_match limitation with pan version 8 in Automation/API Discussions

test_security_policy_match limitation with pan version 8

deepak12 — Thu, 20 Feb 2020 17:50:45 GMT

HI, @gfreeman and all ,

Just wanted to confirm , if we have limitation for test_security_policy_match cmd for Pan version 8 , getting error while pulling security rule name ? Same cmd is working fine for me if i am running for firewall having version 9 .

I tried to pull output using fw.xapi.op as well but same result .

Thanks

Re: test_security_policy_match limitation with pan version 8

gfreeman — Thu, 20 Feb 2020 17:59:03 GMT

I believe this command was added to pandevice in the 8.x timeframe, so it should work.

What is the command you're running against both firewalls, and what is the error you're seeing when running against the 8.x firewall?

Re: test_security_policy_match limitation with pan version 8

deepak12 — Thu, 20 Feb 2020 18:44:17 GMT

HI @gfreeman ,

Please find error details below against fw version 8:

==============Policy detail==================
Traceback (most recent call last):
File "finaltestversion.py", line 67, in <module>
x = fw.test_security_policy_match(from_zone=srczone, to_zone=dstzone, source=srcip, destination=dstip, port=dstport, protocol=proto)
File "C:\U\site-packages\pandevice\base.py", line 4873, in test_security_policy_match
'name': elm.attrib['name'],
KeyError: 'name'

However again version 9 i am getting output as expected i.e policy name , index and action .

Re: test_security_policy_match limitation with pan version 8

deepak12 — Fri, 21 Feb 2020 15:17:05 GMT

hi @gfreeman ,

just checking if you got a chance to check for error .

Thanks .

Re: test_security_policy_match limitation with pan version 8

gfreeman — Thu, 27 Feb 2020 18:01:40 GMT

Please try updating your pandevice/base.py file as shown here and tell me if this fixes it:

https://github.com/PaloAltoNetworks/pandevice/commit/284710ac8633330fed1ef2d96180a2e955785e90

Re: test_security_policy_match limitation with pan version 8

deepak12 — Fri, 28 Feb 2020 06:18:36 GMT

@gfreeman ,

Thanks , i will test this and update you.

Re: test_security_policy_match limitation with pan version 8

deepak12 — Fri, 28 Feb 2020 14:09:12 GMT

HI @gfreeman

I have tested it and working as excepted .

Thanks a lot for your help 🙂