topic Re: Mapping all the rules, interfaces etc.. in General Topics

Mapping all the rules, interfaces etc..

slawek.kunach — Thu, 21 Jun 2012 11:35:21 GMT

Is there any way to export or view all the currently configured Rules, interfaces, tunnels etc.. outside of the Palo Alto Admin webpage?

What I want to do is be able to get these in some sort of spreadsheet or database so that I can refer back to it without having to log onto the web interface all the time, not to mention it would be a lot faster if I didn't have to go through the PAN interface every time.

Re: Mapping all the rules, interfaces etc..

mikand — Thu, 21 Jun 2012 12:07:18 GMT

Did you check these posts/threads?

https://live.paloaltonetworks.com/message/6354#6354

https://live.paloaltonetworks.com/thread/5154

Re: Mapping all the rules, interfaces etc..

slawek.kunach — Thu, 21 Jun 2012 13:33:27 GMT

I had seen that second thread but not the first.

So the short answer is there is no feature to do this really, apart from pulling the info manually from the CLI, which when you have a lot of Rules and URL filters can be quite a chore.

Anyway, I have mailed Staffan to see if his utility might help.

Thanks

Re: Mapping all the rules, interfaces etc..

James — Thu, 21 Jun 2012 13:41:36 GMT

Hi There,

This and variations of the X-Path may help:

You can browse the API in PAN-OS 4.1 by changing the text in the WebUI after the 1st '/' (forward slash) to 'api'. E.g. https://192.168.1.1/api. You will need to login first.

Thanks

James

Re: Mapping all the rules, interfaces etc..

slawek.kunach — Fri, 22 Jun 2012 11:46:28 GMT

Ah ha. Thats the one. Thanks, I managed to export the rules doing it that way.