Hi.
Im working with a customer using PANW/NSX that wants to automate Panorama/firewall deployment with ansible.
So far I have found a few stumbling blocks:
We are trying to do automated deployment of multiple VM firewalls, managed by Panorama and using bootstrapping for the initial setup. All appliances will be hosted on ESXi server.
The problem we have is how to license the VM firewalls before bootst
...
Hi,
Need help in creating a ansible playbook for " Device Serail Number Swap in Panorama".
CLI command: > replace device old <old SN#> new <new SN#>
XML API:
<replace><device><old>*old device serial number*</old><new>*new device serial number*</new></dev
Hi Team
My requirement is:
Run a Python/Powershell script from a windows box which should connect to Palo Alto by command line with SSH connection and run some commands, like "show user group list" or "show system disk-space", It should display the out
...
im trying to get a list of ipsec tunnels from each template stack i have. but anytime i attempt to use the class pandevice.network.IpsecTunnel i receive an error that pandevice doesnt have an attribute network.... according to the documentation here
...
I am trying to create a report and automate disabling rules that have not been used in the last 30 days.
the report will run the 1 st of every month.
So I am looking for API calls for the Policy Optimizer "unused in 30 days"
or the CLI commands so
...
HI All,
Is there anyone who is working on panos version/software upgrade automation via panorama. Please share script or APIs.
How can you automate firewall rule creation when App-ID is used? This seems easy enough on a port-based firewall, but I have yet to see anything addressing APP-ID. A typcial flow could look like this:
user submits firewall request form
appropriate appr
...
I have Panorama managing my firewalls. I would like to leverage Postman to make API POSTS to Panorama for new security policies.
Can someone provide an example of a filled-out body with bogus data to show me how the API wants it?
I'm particularily g
...
Ok, i will first start by saying ive never attempted anything like this before. Im an old school network engineer but times are a changing and im trying to learn how to automate simple tasks. All I need to do is promt the user to enter and IP address
...
Hi all,
Because there are no useful methods to monitor the configured QoS values (at least til 7.0.3, I don't know if there will be a monitoring of QoS in the future), I have written a little script in powershell which gets all the required values
...
We do a lot of object creation on a weekly basis, and I wanted to find a better way to handle this. Here's a tool I've been working on over the past year or so, which accomplishes this using the API and CSV files.
You can also add objects to groups,
...
Hi,
Currnely we are checking the following commands to commit changes to panorama (admin-level) made by spsefic admin user:
1.
https://<Panorama>/api/?&type=commit&action=partial&cmd=<commit><partial><admin><member>admin-name<></member></admin></partia
...
Has anyone encountered this problem? I have noticed since upgrading Panorama to 8.1.7 that two of my API commits no longer work: log collector and forced template stack. I get the following message from Panorama:
<response status="success" code="19"
...
I've taken the instructions to extract the XML command from the debug console.
<request cmd="edit" obj="/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name='my-ipsec-tunnel']/disabled" cookie="7684494492332192"> <di...
