REST XML API- USING ORACLE and Panaorama , Dynamic address object updation failure on Palo-Alto Devices

vishal — Tue, 08 Oct 2013 10:19:20 GMT

The Oracle server is making REST-XML API request from a SQL PROCEDURE using the UTL_HTTP package to Panorama server for the below

key generation for panorama [ Successful ]
Dynamic object creation on panorama [ Successful ]
FW rule creation on panorama [ Successful ]
commit ALL panorama [ Successful ]
commit on device group using panorama [ Successful ]
update [register/unregistered] dynamic address objects using panorama [ Failure : 502 Bad Gateway ( UTL_HTTP package error) ]

As a single point of management panorama is used.

The last one ( 6th ) request is failing as panorama is used as a proxy to update the dynamic address object on device. The same request is getting successful when run through the Browser.

Sample XML API Request is :

https://<panorama_host_name>/api/?type=user-id&action=set&vsys=vsys1&cmd=<uid-message><version>1.1</version><type>update</type><payload><register><entry identifier="dy1" ip="1.1.1.5"></entry></register></payload></uid-message>&key=<key_value>&target=<device-id>'

When debugged on the device using below commands -

debug user-id on debug

debug user-id set userid all

tail follow yes mp-log useridd.log

I am able to see request coming on the device when run through the BROWSER. but NOT when run through the Oracle server procedure.

Below different command from the oracle procedure to ensure that request is getting reached from panorama to device-

https://<panorama_host_name>/api/?type=op&cmd=<show><system><info></info></system></show>&key=keyvalue&target=<device-id>

The above is working from the ORACLE Procedure as well as browser.

So it seems that userid xml is not working from oracle procedure.

Please help or guide to resolve this.

Re: REST XML API- USING ORACLE and Panaorama , Dynamic address object updation failure on Palo-Alto Devices

KiCheon.Lee — Tue, 14 Apr 2015 10:59:57 GMT

Hello,

Did you find it out for resolved way?

If you did, please let me know it.

Thanks,

KC Lee

topic REST XML API- USING ORACLE and Panaorama , Dynamic address object updation failure on Palo-Alto Devices in General Topics

REST XML API- USING ORACLE and Panaorama , Dynamic address object updation failure on Palo-Alto Devices

Re: REST XML API- USING ORACLE and Panaorama , Dynamic address object updation failure on Palo-Alto Devices