topic Re: XML API in General Topics

XML API

gombodorj — Fri, 11 Dec 2015 07:05:03 GMT

hi , i enter follow . but occurs error (Malformed Request)

https://10.21.63.99/api/?type=config&action=set&xpath=/config/devices/entry[@name=%27localhost.localdomain%27]/vsys/entry[@name=%27vsys1%27]/rulebase/security/rules/entry[@name=%27rule1%27]&element=%3Csource%3E%3Cmember%3E12.12.12.1%3C/member%3E%3C/source%3E%3Cdestination%3E%3Cmember%3E11.11.11.1%3C/member%3E&key=LUFRPT14MW5xOEo1R09KVlBZNnpnemh0VHRBOWl6TGM9bXcwM3JHUGVhRlNiY0dCR0srNERUQT09

Re: XML API

reaper — Fri, 11 Dec 2015 09:17:30 GMT

please try this:

https://10.21.63.99/api/?type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='rule1']&element=<source><member>1.1.1.1</member></source><destination><member>2.2.2.2</member></destination>&key=LUFRPT14MW5xOEo1R09KVlBZNnpnemh0VHRBOWl6TGM9bXcwM3JHUGVhRlNiY0dCR0srNERUQT09

please take a look here for more information regarding formatting of API: PAN-OS and Panorama XML API Reference Guide

regards

Tom

Re: XML API

kiwi — Fri, 11 Dec 2015 09:19:25 GMT

You are missing the end-tag </destination> in your example.

Add it and it should work.

Note that you can check ms.log for errors and it should give you an idea of what was wrong :

Entity: line 1: parser error : Premature end of data in tag request line 1
r>12.12.12.1</member></source><destination><member>11.11.11.1</member></request>
                                                                               ^

Regards,

-Kim.

Re: XML API

miclark1 — Fri, 11 Dec 2015 15:22:53 GMT

Please find a rule example below using curl: with --data-urlencode

for key, I exported the value on my mac from terminal: export KEY=whateverthekeyis

curl -k -d key=$KEY --data-urlencode "xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='API-Deny-All']" -d 'type=config' -d 'action=set' --data-urlencode "element=<to><member>any</member></to><from><member>any</member></from><source><member>any</member></source><destination><member>any</member></destination><source-user><member>any</member></source-user><category><member>any</member></category><application><member>any</member></application><service><member>any</member></service><hip-profiles><member>any</member></hip-profiles><action>deny</action><log-start>yes</log-start>" https://1.1.1.1/api

Here is another way to do it as well with curl

curl --globoff -k "https://1.1.1.1/api/?type=config&action=set&key=$KEY&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='allowany']&element=<to><member>any</member></to><from><member>any</member></from><source><member>internal-GROUP</member></source><destination><member>APP-GROUP</member></destination><application><member>any</member></application><service><member>any</member></service><action>allow</action><log-start>yes</log-start>"

Michael Clark

Palo Alto Networks

Re: XML API

gombodorj — Sat, 12 Dec 2015 09:02:27 GMT

Thanks guys for response