topic Re: Address group - addresses addition using API in Automation/API Discussions

Address group - addresses addition using API

RavitejaP — Mon, 16 May 2022 13:48:59 GMT

Dear Team, We have been following the api's provided in documentation and we are stuck where the address created automatically, cannot be added to the address group but the possibility that was seen is only for PUT methods which will overwrite the existing address group. Please suggest if there is a REST-api method that can be utilized to push a new address to existing address group. Thanks in advance.

What we tried earlier for testing this:

1. PUT option -> is editing entire members of that address group
2. POST option -> not allowing edits

Re: Address group - addresses addition using API

JimmyHolland — Mon, 12 Sep 2022 11:24:01 GMT

Hi @RavitejaP, for anyone to assist you, we would need to know which PAN-OS API you are using (XML or REST), and see some (redacted as appropriate) code you are using to interact with the API. Thanks

Re: Address group - addresses addition using API

RavitejaP — Mon, 12 Sep 2022 12:11:42 GMT

Hi Jimmy,. Thanks for the response. We are using REST API for our regular ops.
We are testing the action through postman before I deploy into code.

Action: Tried POST - No change. Tried PUT: Overrides addressgroup

URL: https://devpanorama/restapi/v10.1/Objects/AddressGroups?location=Mobile_User_Device_Group&name=RSTesting

with the following body.

{ "entry": [{ "@name": "RSTesting", "dynamic": { "member": ["RStesting123"]} }] }

Re: Address group - addresses addition using API

JimmyHolland — Mon, 12 Sep 2022 14:02:39 GMT

Hi @RavitejaP, if you want to use a Dynamic Address Group (docs), you would specify a "filter" (a match criteria of tags), but in the code you have specified a "member", which is how Static Address Groups work, by adding member objects. Per the docs (at https://yourpanorama/restapi-doc😞

Also in the docs per the above screenshot, POST should be for creating (and renaming), and PUT for editing, if that helps.

Once you have decided if you are going to use Dynamic or Static Address Groups, the code needs to be amended accordingly.