So I had a crazy idea and started poking around at the XML API on my firewall. I wanted to see if there was a generally efficient way to automate a query against PAN-DB. Seems straightforward enought; either test/url-info-cloud or test/url-info-host ...
Dear All, on Panorama GUI (version 8.1.3), I am able to move security policies to Top, Bottom, Up and Down in the device group pre-rule section. However I could not find APIs to perform these tasks. The closest one is in here https://docs.paloaltonet...
Is there a way to disable ipsec tunnel via api?From what I reah ansible-pan, there is only state present / absent. Thanks
Hi All I want to do ruleadition/Modifcation automation by firmon tool.What we have to take care 1st.Can any one suggest me Debu
Is there an API command equivalent to the following? admin@firewall(primary-active)> configureadmin@firewall(primary-active)# show device-group "" address Thanks!
Hi, I've been trying to tailor two API calls for adding managed device to a template in panorama and override template variable for for the specific device.Looking at the API browser I get the following which throws error message with curl. # Add dev...
We have quite alot of devices and they are growing in numbers. If we would like to check different settings accross all the devices how would you accomplish that? (from what i have understood, there is no way in panorama to see for example if setting...
I am trying to achieve two things in Pandevice and am struggling. 1) I cannot automatically create a local firewall object with all of it's children.I can create a fw object. I can then use it as a parent to manually refreshall the object types that ...
Despite me reading alot of documentation i have not really understood this. Im trying to add a device in panorama, so i run this command from the cli. set mgt-config devices 1234555 hostname 1234 This gives me the following output. (container-tag: mg...
Anyone had any luck with the following API call. Trying to make front end for the helpdesk to be able to generate tickets to disable global protect if needed. api/?type=op&cmd=&key=APIKEY I keep getting the following responseop command for client ssl...
HiWe are new to Ansible, and would like to automate the create of new vsys on a chassis. Currently we do this manually with a spreadsheet derived from information provided by our network team.Are there any playbooks available that can be put together...
Hi everyone, I want to integrate the Palo Alto (Panorama) API into Demisto in order to do automatic blacklisting of malicious IPs (as determined in a phishing playbook). One concern the infrastructure team has is whether or not the automatic adding t...
I have a customer that has multiple growing number of subscriptions on Azure and he would like to know if there is a better way configure them, instead of creating Service Principles, one by one. PS: if the subscription ID was not a required field, t...
Hello. I apologize if this question is already answered. Is it possible to export the config-bundle using the XML API?I can only download the Panorama config. And i do not have direct IP access to the firewalls that are connected. If this is not poss...
First of all - thanks for the API - it's mostly great. But, let's talk about Ansible and PA. Some of our folks went to Ansible Fest and talked to the PA folks there and they said that they were working on making it better - but requiring external mod...
