topic Re: Object add in bunch of policies. in General Topics

Object add in bunch of policies.

ChiragP — Thu, 23 Jul 2020 03:44:22 GMT

Hi All,

An object (IP address: 192.168.1.2 as an example) configured in the PA firewall and assigned it to 50+ security policies as a source/destination address.

Now, I want another object (IP address: 192.168.1.5) assign into the same 50+ security policies as IP 192.168.1.2. What's the fastest way to do it?

I can manually do it by going in each policy that IP 192.168.1.2 configured with and add new object IP 192.168.1.5 there but it's really time-consuming as I need to do it for 50 policies. So just checking if anyone knows the fastest way to do it?

Thank you.

Re: Object add in bunch of policies.

SutareMayur — Thu, 23 Jul 2020 06:45:16 GMT

@ChiragP

API is the option. Below article may help you here.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-rest-api/work-with-address-objects-rest-api.html

And better have address group to use under security policies. So without API also you can add new object in group and avoid repetitive task.

Mayur

Re: Object add in bunch of policies.

reaper — Thu, 23 Jul 2020 11:53:01 GMT

click, drag and drop is also possible 😉 but as recommended by @SutareMayur i'd replace the one object with a group object, then just add the 2 ip to the group

next time, you'll only have to add a new ip to a group once

Re: Object add in bunch of policies.

ChiragP — Mon, 27 Jul 2020 05:37:01 GMT

Thanks for the reply.

Regards.