Powershell to Update Custom URL Category

WesAllen — Fri, 24 Jul 2015 16:24:28 GMT

Wanted to contribute back with some powershell I put together to update a custom url category on a firewall. I used several posts here, as well as some code from a Nessus Powershell script and the pan-python project as a basis for this script. Also on GitHub: wesallen/PaloAlto-Powershell · GitHub

# Carlos Perez provided this bit of code to help with ignoring the self-signed

# certificate on Nessus. If you are not using a self-signed certificate you

# don't need this bit of code.

if ([System.Net.ServicePointManager]::CertificatePolicy.ToString() -ne 'IgnoreCerts')

{

$Domain = [AppDomain]::CurrentDomain

$DynAssembly = New-Object System.Reflection.AssemblyName('IgnoreCerts')

$AssemblyBuilder = $Domain.DefineDynamicAssembly($DynAssembly, [System.Reflection.Emit.AssemblyBuilderAccess]::Run)

$ModuleBuilder = $AssemblyBuilder.DefineDynamicModule('IgnoreCerts', $false)

$TypeBuilder = $ModuleBuilder.DefineType('IgnoreCerts', 'AutoLayout, AnsiClass, Class, Public, BeforeFieldInit', [System.Object], [System.Net.ICertificatePolicy])

$TypeBuilder.DefineDefaultConstructor('PrivateScope, Public, HideBySig, SpecialName, RTSpecialName') | Out-Null

$MethodInfo = [System.Net.ICertificatePolicy].GetMethod('CheckValidationResult')

$MethodBuilder = $TypeBuilder.DefineMethod($MethodInfo.Name, 'PrivateScope, Public, Virtual, HideBySig, VtableLayoutMask', $MethodInfo.CallingConvention, $MethodInfo.ReturnType, ([Type[]] ($MethodInfo.GetParameters() | % {$_.ParameterType})))

$ILGen = $MethodBuilder.GetILGenerator()

$ILGen.Emit([Reflection.Emit.Opcodes]::Ldc_I4_1)

$ILGen.Emit([Reflection.Emit.Opcodes]::Ret)

$TypeBuilder.CreateType() | Out-Null

# Disable SSL certificate validation

[System.Net.ServicePointManager]::CertificatePolicy = New-Object IgnoreCerts

}

##Firewall URL

$HostPA = "https://x.x.x.x"

##API Key

$apiKey = "your_api_key"

##Name for custom URL Category

$category = "your_category"

## input file, one url per line, formated like this: <member>somesite.com</member>

$urls = (Get-Content .\urls.xml) -join""

##Send new list, replaces all items within the category

[xml]$content = Invoke-RestMethod "$HostPA/api/?xpath=/config/devices/entry/vsys/entry/profiles/custom-url-category/entry[@name='$category']/list&action=edit&type=config&element=<list>$urls</list>&key=$apiKey"

##Print response code

$content.response

##Commit Changes

[xml]$content = Invoke-RestMethod "$HostPA/api/?type=commit&cmd=<commit></commit>&key=$apiKey"

##Print response code

$content.response

Re: Powershell to Update Custom URL Category

SA129 — Mon, 30 Nov 2015 23:06:27 GMT

Hey WesAllen,

This is great! Exactly what I needed.

I'm wanting to use action=set instead of edit. Though its providing an error indicating it may need to override template object first.

EDIT: Figured it out.

topic Powershell to Update Custom URL Category in Automation/API Discussions

Powershell to Update Custom URL Category

Re: Powershell to Update Custom URL Category