Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ansible Galaxy (PaloAltoNetwork)

khangt — Wed, 08 Apr 2020 17:39:12 GMT

Hi all,

I'm new to Ansible and am trying a specific use case where I am connecting to a PAN-OS firewall device through SSH and running my panos_op commands. Is there a way to bypass HTTPS as our production firewalls are compliant to our customers with not allowing any HTTPS access from any host. When I run my script, I am getting: "msg": "Failed connection: URLError: reason: [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:897)".

My script:

P.S. --- I have already added the Ansible Server IP Address in Panorama that manages all of our PAN-OS devices to the list of permitted IP addresses which is located under Device --> Interfaces --> Management so every host can manage the firewall.

Any help and input is very appreciated! 🙂

Re: Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ans

gfreeman — Fri, 01 May 2020 16:12:59 GMT

All but like two Ansible modules interact with the PAN-OS XML API (https port 443 by default), not the CLI. So the client host running Ansible will need 443 access to the PAN-OS management interface to work.

topic Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ansible Galaxy (PaloAltoNetwork) in Automation/API Discussions

Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ansible Galaxy (PaloAltoNetwork)

Re: Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ans