topic Re: How to limit delete count Palo Alto Firewall using the service-edit.php-Dont want to do all at in General Topics

How to convert security policies into an excel file in Palo Alto Firewall

Yasir — Tue, 03 Jan 2017 09:02:39 GMT

I am looking for a way to convert exsisitng security policies in PA firewall in PAN-OS version 7.0.x to an excel or CSV file. I found no valid way or documents. Can any body help me.

Cheers

Yasir

Re: How to convert security policies into an excel file in Palo Alto Firewall

santonic — Tue, 03 Jan 2017 09:16:33 GMT

There is no such built-in function.

But it shouldn't be too difficult to write a script which parses XML config file and rewrites it as CSV as XML is nicely structured.

Re: How to convert security policies into an excel file in Palo Alto Firewall

pulukas — Sat, 07 Jan 2017 18:32:10 GMT

I've used this user script in version 5 & 6 in the past. Not sure if it still works in version 7.

https://live.paloaltonetworks.com/t5/API-Articles/Simple-export-of-rules-as-Excel-or-HTML/ta-p/65082

How to limit delete count Palo Alto Firewall using the service-edit.php-Dont want to do all at once

clyde.franklin — Thu, 03 Aug 2017 16:44:13 GMT

With Pan Configurator service-edit.php if I want to delete unused objects is it possible to set a count limit? For exampel I dont want to do all 500 at one time unt say 100 at a time. Look to see if there is a string like "maxcount' to end comman below.

php address-edit.php in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)'

Re: How to limit delete count Palo Alto Firewall using the service-edit.php-Dont want to do all at

Raido_Rattameister — Thu, 03 Aug 2017 17:45:41 GMT

Follow those steps to convert rules into Excel.

https://indeni.com/how-to-export-palo-alto-networks-firewalls/

Re: How to limit delete count Palo Alto Firewall using the service-edit.php-Dont want to do all at

clyde.franklin — Thu, 03 Aug 2017 17:59:43 GMT

Hi thanks for reply but was acutally lookin gofr answer on below? Not sure if my post heading was mixed up.

php address-edit.php in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)'