topic API to dynamically register and tag from Panorama to Firewall in General Topics

API to dynamically register and tag from Panorama to Firewall

Sec101 — Fri, 28 Aug 2020 15:35:30 GMT

I'm finding we can use the api to register IPs to Tags on panorama no problem. I can view that they are registered on Panorama. However, Panorama is not pushing these mappings to the managed firewalls. I'm matching on name and I'm using the dynamic group in a policy on that firewall.

What actually kicks panorama to push a registered IP to TAG over to a managed firewall?

Re: API to dynamically register and tag from Panorama to Firewall

nikoolayy1 — Sun, 21 Mar 2021 22:41:46 GMT

I don't know if this will work but have test User-ID redistribution?

https://docs.paloaltonetworks.com/panorama/9-0/panorama-admin/panorama-overview/user-id-redistribution-using-panorama

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-network/redistribute-user-mappings-and-authentication-timestamps/configure-user-id-redistribution