Automating Palo Alto update sequence

Zohaib89 — Thu, 14 Feb 2019 17:43:18 GMT

Hey guys, so I've got the various Palo Alto PA220 XML Apis that lets you automatically update the Firewall instead of having to do it through the GUI interface.

I want to know what is the best way to create a script to do this automatically so I don't have to do this manually step by step.

Re: Automating Palo Alto update sequence

BPry — Fri, 15 Feb 2019 03:53:35 GMT

@Zohaib89,

You effectively need to create a script to have the firewall start the software download and gather the job-id issued with that request. You'll then need to run a check against that job-id so you can see when it actually finishes.

Once the requested version is downloaded you would then schedule the install with the API and record the job-id once again. You'll need to run periodic checks against that job-id to see when the software install has actually completed.

Lastly you'll need to actually restart the device, which is easily triggered by the API.

topic Re: Automating Palo Alto update sequence in General Topics

Automating Palo Alto update sequence

Re: Automating Palo Alto update sequence