topic Re: Script to create multiple nodes on PANOS in General Topics

Script to create multiple nodes on PANOS

alo_palto — Wed, 04 Mar 2020 16:23:57 GMT

Hi all,

Is there a quick way to script / create 50+ nodes on a PA Firewall (azure based)?

Cheers.

Re: Script to create multiple nodes on PANOS

BPry — Thu, 05 Mar 2020 00:54:51 GMT

@alo_palto,

Are you just talking about creating large numbers of address objects?

Re: Script to create multiple nodes on PANOS

alo_palto — Thu, 05 Mar 2020 09:34:20 GMT

Exactly yes!

Re: Script to create multiple nodes on PANOS

OtakarKlier — Thu, 05 Mar 2020 17:53:05 GMT

Hello,

You could export the config, modify/add the objects, and then import it. I dont see a way to do it with the API, but I could be wrong. Also can be done with Panorama.

Regards,

Re: Script to create multiple nodes on PANOS

BPry — Thu, 05 Mar 2020 18:46:59 GMT

Couple ways you can do it, as @OtakarKlier has already mentioned:

CLI:

set address "My Server" ip-netmask 192.168.1.1/32

You could set all of your set statements how you want and paste them in, which would work fine.

Configuration File:

# FQDN # <entry name="updates.cuasvc.com"> <fqdn>updates.cuasvc.com</fqdn> <tag> <member>Barracuda-Updates</member> </tag> </entry> # Netmask # <entry name="Test-GlobalProtect"> <ip-netmask>172.16.253.128/25</ip-netmask> <tag> <member>GlobalProtect</member> </tag> </entry>

You can locate where these go in your configuration file easier if you search for <address-group> since <address> is referenced a bit in the configuration file.

API:

https://192.168.1.1/api/?key=MYAPIKEY&type=config&action=set&xpath=/config/shared/address/entry[@name='Google-DNS']&element=<ip-netmask>8.8.8.8/32</ip-netmask>

You can use any of these methods to build out your address object base quickly. Personally; I'm a big fan of modifying the configuration file itself and feeding it back into the firewall, because you can put the configuration file into Git, but I also find XML easy to work with.

Re: Script to create multiple nodes on PANOS

alo_palto — Tue, 10 Mar 2020 16:43:18 GMT

Thanks guys, i went ahead and done it manually.

Sorry for slow reply here. Ill rereview next time i have a batch to add.

Out of curiousity, how does one go about exporting and reimporting the config file?