topic Automatic Deploy of Firewalls into Panorama trough api or sdk in General Topics

Automatic Deploy of Firewalls into Panorama trough api or sdk

APalermo865634 — Wed, 18 Sep 2024 14:11:41 GMT

Im trying to automate the deploy of a firewall into panorama using the python sdk (pan-os-python)

It seems I can add devices to panorama by the serial number, but i cannot make them connect cause it need the auth key to be set when adding the firewall to panorama, the SDK does not provide that option, and I cant find a way to do it on the API as well.
Is there any work around that works trough the API / SDK / CLI to fully automate this and not use the Web UI?

Thanks!

my current panorama & firewall version is 10.2.3 running on FIPS mode

Re: Automatic Deploy of Firewalls into Panorama trough api or sdk

OtakarKlier — Wed, 18 Sep 2024 17:42:56 GMT

Hello,

Check out Zero Touch Provisioning.

https://docs.paloaltonetworks.com/plugins/vm-series-and-panorama-plugins-release-notes/panorama-plugin-for-zero-touch-provisioning

Regards,

Re: Automatic Deploy of Firewalls into Panorama trough api or sdk

APalermo865634 — Wed, 18 Sep 2024 17:55:27 GMT

I didn't mentioned this, but the Panorama & VM-Series Firewalls are deployed in GCP, sorry if I did not understand the documentation correctly, but ZTP seems to be feature for actual appliances.
Does this feature also apply to devices deployed on public clouds?

Re: Automatic Deploy of Firewalls into Panorama trough api or sdk

OtakarKlier — Wed, 18 Sep 2024 18:39:27 GMT

Hello,

Shouldnt matter.

Regards,