Ansible - Automating NGFW Configuration

About Ansible Automation

Ansible is a very powerful open source automation language, it uses modules to communicate with vendor specific devices. What makes Ansible unique from other management tools is that it is also a deployment and orchestration tool. In many respects, Ansible helps provide large productivity gains to a wide variety of automation challenges. The Palo Alto Networks Ansible integration project utilizes Ansible to help organizations automate configuration and management of the Palo Alto Networks Platform. The Live Community provides a central place to learn how to utilize this technology, get help from others using it, and more.

Ansible Updates & Tips

Ansible: Using Facts Modules to do Updates

post time: 07-05-2019

How do you perform small, in-place updates to existing config without knowing the whole picture? This blog article teaches you how to use a facts module and various Ansible functions to do just that.

Ansible Version 2.2 Released

post time: 06-12-2019

Ansible version 2.2 is released, including support for configuring log forwarding profiles, subinterfaces, and more.

Webinar: Automate Cloud Security with Ansible

post time: 03-16-2018

Webinar April 25th at 2:00 pm EDT


Palo Alto Networks has developed an Ansible module to enable these organizations to integrate security into their CI/CD pipeline. See it in action and learn how Ansible and Palo Alto Networks help enforce a consistent next-generation security posture across your organization.

Ansible For Firewall SEC Policy Change Management

post time: 07-24-2017

Manage security policy changes using the power of the Palo Alto Networks custom Ansible modules and Ansible ‘pull’ feature.



Using Ansible for AWS Deployments

post time: 07-24-2017

This video shows how to use Ansible to automate and accelerate AWS deployments.




Have questions about how to utilize Ansible to automate your Palo Alto Networks deployments? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
posted: 2 hours ago updated: an hour ago

Changing Metric of Static Route using API

All, trying to send a command via the API to change the metric value of a static route, this is because occassionally my primary connection is extreme...

46 1
posted: Thursday updated: yesterday

Unable to add static route using Ansible module panos_static_route

Hello Experts, I am trying to add a static route in a PAN FW using the Palo Alto module panos_static_route. Here is the variable file: ...

190 3
posted: Tuesday updated: Tuesday

When I use the API to pull the device-state - am I getting the latest ?

In another article here, from 2014 (precambrian issues) - they broke down some of the insides of the device state config backup.One of the commands li...

150 0
posted: Monday updated: Monday

Traffic log query using curl and retrieval

Hi Team, I presume pan devices allow API requests for traffic query using curl. Attempted following query using curl with no success. Got a promp...

98 0
posted: a week ago updated: a week ago

Module for puppet/ chef for updating HIP opjects?

Hi, has anyone came across modules as such? I basically wanted to remove certain patch version number (eg MS KB number) from the current HIP object an...

124 0

Related Topics

Palo Alto Networks Delivers

Ansible Community Ansible Community

Automation for Everyone. Ansible is designed around the way people work and the way people work together. Learn more

Ansible Documentation Palo Alto Networks Ansible doc's Ansible Docs on GitHub

Read the latest reference documentation for the Palo Alto Networks Ansible project on Github. Learn more