topic Re: Need help with creating service ports and firewall rules using python in Automation/API Discussions

Need help with creating service ports and firewall rules using python

AsrarF — Thu, 30 Sep 2021 19:11:39 GMT

Hello Everyone,

Asrar here... Thanks in advance.

I am in the process of creating services ports(bulk) and then add them to the a service port group.

2.Make address objects (Again in bulk).

3.Configuring a rule using the address objects, Service group created earlier.

Wanted to automate this whole task so as to speed this up. Any help in this will be highly appreciated.

I am pretty much novice in python and automating tasks using apis(with post man)

Re: Need help with creating service ports and firewall rules using python

gfreeman — Thu, 30 Sep 2021 23:12:03 GMT

Would recommend using the Ansible collection or the Terraform provider

Re: Need help with creating service ports and firewall rules using python

AsrarF — Sat, 02 Oct 2021 06:33:02 GMT

It seems i will have to download ansible and Then in the playbooks specify i need to use pan-os collection.

But i dont think i can install ansible directly on windows . This can only be installed on linux or centos or any vm. otherwise i will have to install something called cygwin which i do suppose is open source . is there any security related issue with installing that.

Also how i will make the ansible installed on cygwin talk with my firewall api any idea.

Thanks

Re: Need help with creating service ports and firewall rules using python

JimmyHolland — Sat, 02 Oct 2021 10:14:15 GMT

Yes, I don't think many of the IaC tools like Ansible and Terraform have Windows binaries for execution. If you're desperate to run these tools from your own machine, another option besides Cygwin is WSL (https://docs.microsoft.com/en-us/windows/wsl/about). However, you may wish to consider how using IaC tools will scale, and executing them from a centralised place as opposed to a Windows workstation. Both tools have options, including supported enterprise versions, and can also be executed with pipelines too.