Hello,
Is there an available API call (XML or REST) or Ansible command that can be used to:
1) create a user group
2) add an existing user to the newly created group
I looked through the API docs and Ansible collection docs, but wasn't able to find any
...
Hello,
I've noticed that Ansible will commit changes by default, False option doesn't seem to influence it.
For example, if Ansible adds security rule for 10.10.10.1 - it will not be committed.
Next run, adding rule for 10.10.10.2, will commit the rul
...
Hi Guys,
stuck here, running the static route module and receive this error:
ERROR! couldn't resolve module/action 'panos_static_route'. This often indicates a misspelling, missing collection, or incorrect module path.
This should work as my other mo
...
Hi Guys,
I would like to create objects and Rules that would be shared between the different vsys I have setup within my Firewall.
I used to create "Shared" objects through the WebUI and would like to reproduce the same tasks via an ansible playbook.
I
...
TASK [add a pbf rule] **************************************************************************************************************************************************************************************************************************
An excepti
So I had a crazy idea and started poking around at the XML API on my firewall. I wanted to see if there was a generally efficient way to automate a query against PAN-DB. Seems straightforward enought; either test/url-info-cloud or test/url-info-hos
...
Hello,
How can I get a full backup including all settings, objects and security policies? The firewall is not managed by Panorama, I would like to be able to automate backup&restore process with Ansible and paloaltonetworks collection.
Regards,
Michael
i'm trying to run the following task in my play to create a bunch of new L3 subinterfaces on ae2 and then add them to the appropriate security zone. if i try to assign the zone as part of the panos_l3_subinterface, or through a different play (as sho
...
Hello,
For a PAN device connected with an LDAP server - is it possible to create an address group object containing users added with "Authentication profile: LDAP", using Ansible?
Thank you for your time.
Best regards.
What kind of least privilege account role would be needed for dagpusher.
Also can minemeld read registered IP's from a firewall and use it in dagpusher/EDL
Just curious if there is another way to do it, without spending money..
I am pulling DAG blocked IPs from physical PA boxes using a python script, and then i am thinking of printing the formatted output in csv. This CSV will be used by a powershell s
...
I have a simple script that used to work but not any longer. It now hangs during the "load_system_host_keys()". I have even tried using user parameters, which is commented out, but still it hangs. Any idea why it can't connect either via ssh key o
...
I am new to python. I am able to get results using op() method but not able to display or parse them to use meaningfully.
fw = pandevice.base.PanDevice('10.10.10.10',api_key='abcdefgh')
fwcmd = fw.op(cmd='show global-protect-gateway current-user',xm...
Hello,
I have three virtual machines, each hosting a PA Firewall. One VM - test one, has no SSL installed, the other two have a self-signed SSL certs installed. I can access the firewall web GUI on all three VMs using a web browser. When I run the fo
...
Hello,
I have a simple playbook adding/removing tags:
---
- name: 'Palo Alto PAN OS: Create a new tag object.'
hosts: all
connection: local
gather_facts: true
collections:
- paloaltonetworks.panos
pre_tasks:
- name: Get the sy...
