pushed-shared-policy

[MPoffal]

Hi, 

We have a development what extract the configuration via rest api and analize this. 

In a firewall with vsys and panoroma, i have this problem. 

in PAN-OS 7.0.x extract the policy configuration for all vsys with this call 

/api/?type=op&cmd=<show><config><pushed-shared-policy></pushed-shared-policy></config></show> 

in PAN-OS 7.1.x if i utilice the same rest api url, the result is empty. 

Result: 

<response status="success"><result>No shared policy pushed to device</result></response> 

Via cli, i can extract the config of each vsys whith this command. But this command is no available via rest api. 

show config pushed-shared-policy vsys vsys1 

the call: 

/api/?type=op&cmd=<show><config><pushed-shared-policy><vsys><vsys1></vsys1></vsys></pushed-shared-policy></config></show> 

Result: 

<response status="error" code="17"><msg><line> show -> config -> pushed-shared-policy -> vsys is invalid</line></msg></response> 

How i can extract the pushed-shared-policy for all of each vsys via rest api in 7.1.x ?

Marco Poffal Daza

[scottdware · Accepted solution]

Marco,

Try using the following:

/api/?type=op&cmd=<show><config><pushed-shared-policy><vsys>vsys1</vsys></pushed-shared-policy></con...

You have to have the "vsys1" surrounded by the <vsys></vsys> tags.

[MPoffal]

Thanks @scottdware