topic Palo GUI: Selecting lines (Multiselect) in General Topics

Palo GUI: Selecting lines (Multiselect)

rkra — Wed, 06 Aug 2014 15:29:54 GMT

Hello,

I would like to put 20 FQDN Names in a Group ir directly in a policy.

AAAA1

AAAA2

AAAA3

AAAA4

....

AAA20

You know what I mean, it takes a long time :=(( ... or there is a way how to select more names I do not know.

Roman

Re: Palo GUI: Selecting lines (Multiselect)

HULK — Wed, 06 Aug 2014 15:51:46 GMT

Hello rkra,

If your PAN FW is running PAN OS version 6.0.0 or above, you may use the TAG feature. It might help you.

Objects > Tags

Tags allow you to group objects using keywords or phrases. Tags can be applied to address objects, address groups (static and dynamic), zones, services, service groups, and to policy rules. When tagged, the keyword can be used to sort or filter objects; to visually distinguish objects, you can also apply a color to a tag. When a color is applied to a tag, the Policy tab displays the object with the background color.

Use this tab to create, assign a color, delete, rename, and clone tags. Each object can have up to 64 tags; when an object has multiple tags, it takes the color of the first tag in the ordered list of tags applied.

Note: The Objects >Tags tab only displays the tags that you defined locally on the firewall (or on Panorama). If you have configured dynamic address groups, this tab does not display the tags that are dynamically retrieved from the VM Information sources defined on the firewall.

Thanks

Re: Palo GUI: Selecting lines (Multiselect)

rkra — Wed, 06 Aug 2014 18:15:13 GMT

Hello HULK,

I know about the benefits of tags, but I do not think it helps me with this problem.

bye

Roman

Re: Palo GUI: Selecting lines (Multiselect)

pulukas — Wed, 06 Aug 2014 19:50:16 GMT

For these types of bulk changes I think it is easier to use the cli. Just use notepad to copy and paste all the commands together to add the addresses to the group. then paste this into cofigure mode.

set address-group NAME static AAAA1

Re: Palo GUI: Selecting lines (Multiselect)

tshiv — Thu, 07 Aug 2014 08:29:00 GMT

You might look into using XML API to achieve what you are trying to do here. Following document might be helpful:

Sample API workflow for Dynamic Address Objects

Thanks

Re: Palo GUI: Selecting lines (Multiselect)

rkra — Thu, 07 Aug 2014 08:49:50 GMT

WOW!

I have to learn a lot to understand it first.

Roman