topic Re: python-script How to add source address to gpolicy (XML API) in General Topics

python-script How to add source address to gpolicy (XML API)

gombodorj — Fri, 20 Nov 2015 07:29:04 GMT

Hello,

i would like to add source address and destination address in a policy using XML API. below syntax is right?

/api/?type=config&action=set&key=key_value&xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='test']&element=<source><member>192.168.1.1</member></source><destination><member>192.168.2.2</member></destination>

Re: python-script How to add source address to gpolicy (XML API)

pankaku — Fri, 20 Nov 2015 09:08:27 GMT

Yup the below syntax is right. I have test the same below is the screenshot. This command can add source and destination to existing rule or can create a new rule and in that rule it will have only source address and destination address

Re: python-script How to add source address to gpolicy (XML API)

cpainchaud — Fri, 20 Nov 2015 12:54:53 GMT

You are right.

also, if you are not building a custom tool then you could use what exists already :

https://live.paloaltonetworks.com/t5/SDK-API-Articles/rules-edit-php-to-manage-edit-export-rules-from-CLI/ta-p/53321

it is built on a library that allows to you to any change in 2 lines of code or less.

cheers

Re: python-script How to add source address to gpolicy (XML API)

gombodorj — Mon, 30 Nov 2015 03:46:18 GMT

thanks guys for response. One more question.

I am new for python programming and this code does not working . Pls review

def key_api():
logging.debug("In API key")
conn = httplib.HTTPSConnection(ip)
try:
conn.request("GET", "/api/?type=keygen&user="+username+"&password=" + password1)
except IOError:
print " Unable to get the device's API key"
logging.debug("Error occured")
raise SystemExit(1)
r1 = conn.getresponse()
data1 = r1.read()
m=re.search(r"(<key>)(\w+)", data1)
try:
api_key = m.group(2)
except AttributeError:
print "NO API key is returned , Possibly incorrect creden"
logging.debug("Possible ")
conn.close()
raise SystemExit(1)
conn.close()
print "Working correct1"
return api_key

def send_command(source_address,destination_address):
conn = httplib.HTTPSConnection(ip)
conn.request("GET", "/api/?type=config&action=set&key="+str(api_key)+"&xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='test_Gombodorj']&element=<source><member>"+source_address+"</member></sou rce><destination><member>"+destination_address+"</member></destination>")
print "Working correct2"
type=config&action=set&key="+str(api_key)+"&xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='test_Gombodorj']&element=<source><member>"+source_address+"</member></sou rce><destination><member>"+destination_address+"</member></destination>")
38 print "Working correct2"

Re: python-script How to add source address to gpolicy (XML API)

bgirdner — Tue, 01 Dec 2015 22:53:25 GMT

Is this all of your code, what kind of error are you getting?

Not sure you lost your indentation when pasting the code but if not you may want to make sure it's properly indented as white space is significant in python. Towards the end of the send_command function it looks like you are defining a variable named 'type' but after the = sign I don't see a quotation mark.

Re: python-script How to add source address to gpolicy (XML API)

gombodorj — Thu, 10 Dec 2015 08:18:58 GMT

any error is not occured. But didnt source and destination address added into policy

Re: python-script How to add source address to gpolicy (XML API)

gombodorj — Thu, 10 Dec 2015 08:23:37 GMT

Here is my full code :

http://pastebin.com/YDqNQvVE