topic Re: show running security-policy API limit in Automation/API Discussions

show running security-policy API limit

kremiq — Fri, 21 Apr 2023 09:14:18 GMT

Hello,

If I try to get all the running security policy via an API call https://FW/api/?type=op&cmd=<show><running><security-policy></security-policy></running></show>

it works, but I can only get around 1900 policies. All the rest is not shown. Is there any "start-at" of offset, pagging, or anything to be able to get the full security policy config?

Thanks

Re: show running security-policy API limit

JimmyHolland — Fri, 21 Apr 2023 12:42:38 GMT

Hi @kremiq, I tried to replicate this but was unable to. I created 2000 policies on a PA-3220, and both the following commands retrieved all the rules:

https://{{host}}/api/?key={{key}}&type=op&cmd=<show><running><security-policy/></running></show>

https://{{host}}/api?key={{key}}&type=config&action=show&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules

You could try the second, as the first is the one you already tried. Failing that, the XML API is a part of the product, so is TAC supported, so you can raise a case to investigate further why you are only getting partial results.

Hope that helps

Re: show running security-policy API limit

kremiq — Fri, 21 Apr 2023 14:07:53 GMT

The second API call works, but this is not giving the output I am looking for. The issue is, you get the config with to objects names, they are not already replaced by the actual values.