topic Re: application filter (and groups) with PanRest API in General Topics

application filter (and groups) with PanRest API

andrei_feldman — Mon, 14 Mar 2011 09:35:20 GMT

Hi all,

I'm trying to retrieve applcation filters and groups with the pan rest api, same way it can be retrieved with the cli:

show vsys <vsys-name> application-filter

Thanks,

Andrei

Re: application filter (and groups) with PanRest API

gswcowboy — Mon, 14 Mar 2011 14:48:49 GMT

Hi,

Here are several resources for your reading pleasure. Hope this helps.

https://live.paloaltonetworks.com/docs/DOC-1031

https://live.paloaltonetworks.com/docs/DOC-1583

-Renato

Re: application filter (and groups) with PanRest API

andrei_feldman — Mon, 14 Mar 2011 15:31:42 GMT

Problem is that the application-filter and application-groups objects do not appear in the query which retrieves all configuration.

I tried a specific xpath query such as the one that rerieves predefined apps: https://<ip>/esp/restapi.esp?key=<key>&type=config&action=get&xpath=/config/predefined/application similar to cli: show predefined application

I tried queries such as: xpath=/config/vsys/<vsys-name>/application-filter

or even just : xpath=/config/vsys/

But nothing works . I'm still looking for a way to retrieve that objects.

Re: application filter (and groups) with PanRest API

gswcowboy — Mon, 14 Mar 2011 20:58:56 GMT

This was successful on my end.

https://ip/esp/restapi.esp?type=config&action=get&key=<key>&xpath=/config/devices/entry/vsys/entry/application-filter

<response status="success" code="19"><result total-count="1" count="1"><application-filter><entry name="hitatchi"><category><member>general-internet</member></category><subcategory><member>file-sharing</member></subcategory><technology><member>peer-to-peer</member></technology><evasive>yes</evasive><excessive-bandwidth-use>yes</excessive-bandwidth-use><prone-to-misuse>yes</prone-to-misuse><transfers-files>yes</transfers-files><used-by-malware>yes</used-by-malware><has-known-vulnerabilities>yes</has-known-vulnerabilities><pervasive>yes</pervasive></entry><entry name="test-fileshare"><category><member>general-internet</member></category><subcategory><member>file-sharing</member></subcategory><technology><member>browser-based</member><member>peer-to-peer</member></technology></entry></application-filter></result></response>

Re: application filter (and groups) with PanRest API

andrei_feldman — Tue, 15 Mar 2011 08:22:33 GMT

Thanks it works!