Is there a way to quickly find (and remove) unused objects in policy ? I mean like address or service objects
Hello, I have been working on automating our internal URL analysis process, and I've been using the following documentation to get the verdict of a URL via the Wildfire API:Get a WildFire Verdict (WildFire API) (paloaltonetworks.com)When using Example Request 2 in the above link, I replace the placeholder API value (<API KEY>) with my own ...
Hi Team ,We are testing the panos_nat_rule_group on panorama and somehow it is not working1) Below is the official terraform documentation for Panorama Nat Policy grouphttps://registry.terraform.io/providers/migara/pan-os/latest/docs/resources/nat_rule_groupThe example provided is not working. When we do ‘terraform plan’ – it is not showing any ...
Hey everyone, Does anyone know whether or not it is possible to adjust authentication profiles via the API? Little backstory, I have been working on an API call to adjust the Server Profile for an Authentication Profile. I have tried to build it out of the API builder and the CLI but keep getting 'unauthorized request' for set/edit and error 7 i...
Hi, Has anyone tried creating a local cert and ssl/tls profile using the SDK?If yes, could you please point me in the right direction. In the configuration tree, I'm unable to find those objects so wondering if this feature hasn't been released in the yet.https://pan-os-python.readthedocs.io/en/latest/configtree.html Thanks
Hi All,a newby question on the abilities of terraformthe goal is to auto deploy VM FWs to AWS with as little human involvement as possible for DR events, scaling and new creations - to what extent is this possible? basic steps required:deploy a VM to AWS using terraformbootstrapping (base config, hardening,hostname,mgmt int config etc etc)licens...
Hi All,so we have a Panorama, and using terraform to spin up VMs with very basic config using the init cfg (no bootstrap.xml) which auto registers to my Panorama where I have template and device groups defined with the interface, routing and base security policies which sofar seems to be going well.. VM spins up, auto register with Panorama and ...
Dears, Requirement: I have 100+ firewalls that I need to deploy into multiple remote locations and wanted to do it with zero-touch provisioning. Challenge: For initial deployment, we can PANFWs are coming with factory settings with default IP address, username, and password. Though we could build a bootstrap file by changing the default settin...
Hi All,so managed to do some automatons to the point where we can spin up a PA VM, auto register into Panorama and have policies and template configs applied all automated..The plan is to potentially spin up and tear down large number of VMs in the cloud when needed. one question..- when a device is torn down, how can we 'auto de-register' it fr...
I would like to know about automation possibilities through Strata Cloud Manager to administration of Prisma SASE
Dear All, I am looking for API documentation to achieve the "File Search" operation via API. I did not find this option in the Cortex XDR API documentation, however, wanted to confirm and check if this can be achieved through API or not. Is the API function available to run the "File Search" operation? (“Incident Response --> Action Centre --...
Hi, Checked the documentation but just cannot get a decryption rule created when using "decryption_type: 'ssl-inbound-inspection'" https://paloaltonetworks.github.io/pan-os-ansible/modules/panos_decryption_rule_module.htmlhttps://github.com/PaloAltoNetworks/pan-os-ansible/blob/develop/plugins/modules/panos_decryption_rule.py yaml file is vanilla...
I am hoping to find someone who might have successfully implemented calls to the WildFire API from C# (.NET Core 3.1 or higher). Calls to the "get/verdict" endpoint work exactly as expected. Similar calls to the "submit/file" and "submit/url" endpoints fail with a 500 HTTP status code and no further information. My guess is that the default c...
I'm trying to use the REST API to get/set variables on the template stack.According to the restapi-doc for PANOS 10.1, under the "devices" object, there is an "entry" object which has an Array of objects that contain 2 more objects, the first being "@name" which is the serial number and the second being "variable" which is an object that contain...
Howdy all. I'm trying to get started with some API work on my PAN instances in AWS. I walked through the Getting Started guide for 8.0 and I created a user, assigned an Admin Profile to it that had API access, and then generated a key. Seems pretty simple but no matter what I do, every request is coming back 403: curl -k 'https://w.x.y.z//api/?...
