topic Re: Adding Address object through the CLI in General Topics

Adding Address object through the CLI

GC66 — Thu, 21 Jan 2016 13:50:06 GMT

Hello,

We use O365 and on what seems like a weekly basis they multiple new addresses that we need to whitelist. I would be great if PAlo had an object for this that they kept up to date, but I guess they don't

We therefore need to add these addresses to the firewall and they to an address group, using something similar to

> configure

# set address <AddressObject_01> ip-netmask 1.1.1.1/32

# set address <AddressObject_02> fqdn my.example.com

# set address <AddressObject_nn> ip-range 2.2.2.2-3.3.3.3

# set address-group <AddressGroup> static [ <AddressObject_01> <AddressObject_02> ...<AddressObject_nn> ]

This works fine direct to a firewall, but we have 4 configured through Panorama, and this does not seem to work.

Does anybody konw if this is possible through Panorama?

Thanks

Re: Adding Address object through the CLI

pankaku — Thu, 21 Jan 2016 14:40:55 GMT

check the following doc:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Import-Palo-Alto-Networks-Firewall-Configurations-into/ta-p/57250

Re: Adding Address object through the CLI

GC66 — Thu, 21 Jan 2016 15:33:31 GMT

Thanks, that's sorted it, don't suppose you know the syntax to add an address object to an address group?

Re: Adding Address object through the CLI

pulukas — Thu, 21 Jan 2016 23:26:58 GMT

set address-group GROUPNAME static MEMBERNAME