Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Resolved! Create Post-Security-Rule - RestAPI

I have Panorama managing my firewalls. I would like to leverage Postman to make API POSTS to Panorama for new security policies. Can someone provide an example of a filled-out body with bogus data to show me how the API wants it? I'm particularily getting stuck on the first part of the body.. I have a device group called "firewalls" and the dev...

Add addressobject to specific device group through panorama via python

Ok, i will first start by saying ive never attempted anything like this before. Im an old school network engineer but times are a changing and im trying to learn how to automate simple tasks. All I need to do is promt the user to enter and IP address and then add that IP Address to a specific device group with 1 tag on it. for example i want to...

QoS Monitoring (for PRTG Network Monitor)

Hi all, Because there are no useful methods to monitor the configured QoS values (at least til 7.0.3, I don't know if there will be a monitoring of QoS in the future), I have written a little script in powershell which gets all the required values over the XML API and the creates an output which could be used for the software PRTG Network Moni...

class-8-actual-traffic.PNG
class-8-percentage.PNG
class-8-dropped-packets.PNG
Remo by L7 Applicator
  • 15163 Views
  • 6 replies
  • 6 Likes

CLI tool to import/export objects and rules using CSV files

We do a lot of object creation on a weekly basis, and I wanted to find a better way to handle this. Here's a tool I've been working on over the past year or so, which accomplishes this using the API and CSV files. You can also add objects to groups, remove address objects from address groups, and even download Iron-Skillet pre-built configs to l...

PAN-OS 8.0/8.1 - Push changes committed by specific admin user to devices using API (commit-all)

Hi,Currnely we are checking the following commands to commit changes to panorama (admin-level) made by spsefic admin user:1. https://<Panorama>/api/?&type=commit&action=partial&cmd=<commit><partial><admin><member>admin-name<></member></admin></partial></commit>And using the ...

NirI by L0 Member
  • 4535 Views
  • 1 replies
  • 1 Likes

Resolved! API commits no longer working

Has anyone encountered this problem? I have noticed since upgrading Panorama to 8.1.7 that two of my API commits no longer work: log collector and forced template stack. I get the following message from Panorama:<response status="success" code="19"><msg>There are no changes to commit.</msg></response> However, there are...

Resolved! can't disable IPSec tunnel over API

I've taken the instructions to extract the XML command from the debug console. <request cmd="edit" obj="/config/devices/entry[@name='localhost.localdomain']/network/tunnel/ipsec/entry[@name='my-ipsec-tunnel']/disabled" cookie="7684494492332192"> <disabled>yes</disabled> </request>When i tried using pan-python-0.14.0, it ...

rone by L0 Member
  • 4758 Views
  • 2 replies
  • 0 Likes

Obtaining Policy Descriptions Through the API

Thanks for taking the time to read my message. I'm an intern tasked with writing a program that returns all device descriptions from a set of policies using the PA APIs. I'm unable to find any APIs that return the policy description - only data such as name, rule type, etc. Is it possible to obtain the description through an API call, or would I...

XML API Template stack and Device group push to HA pair

Has anyone had experience using Panorama XML API to push config to an HA pair of firewalls (Template/stack or DG)? For examplehttps://panorama/api/?type=config&action=set&xpath=/config/devices/entry[@name=localhost.localdomain]/template-stack/entry[@name=stack]/devices&element=<entryname="serial">&key=blah How do I spec...

rswart by L0 Member
  • 3248 Views
  • 0 replies
  • 1 Likes

Query External Dynamic List Content

If I have a list of IP addresses, is there a way to query a PA to see if the listed IP addresses are contained within an EDL? This would be a large list, several hundred, so automating this would be the most practical way.

"set" instructions not working when using Ansible PANOS_OP to update Panorama Addresses group

Hi All, This is another issue I am encounting with PANOS Ansible's module. This time when using "PANOS_OP" into Panorama to add a static address into a group. This is the error I am getting when executing "cmd: set device-group MYCLOUD address-group MYCLOUD-GRP-1 static SMTP-10.10.20.30" in playbook: fatal: [10.10.10.10]: FAILED! => {"changed...

pan.xapi.PanXapiError: edit failed, may need to override template object admin first

TASK [Set admin password] *******************************************************************************************************************************task path: /export/home/mmap/Myfirstyml.yml:25<10.60.128.4> ESTABLISH LOCAL CONNECTION FOR USER: admin<10.60.128.4> EXEC /bin/sh -c 'echo ~bommap && sleep 0'<10.60.128.4&g...

Panorama Device Group UserID

Hi All, I am busy testing login events for the API in Panorama to reditribute to the firewalls, when ever I execute the API call I get a 400 error returned:<response status="error" code="400"> <result> <msg>You must specify a valid Device Group</msg> </result> </response>I have looked through all the documenta...

Marc_T by L2 Linker
  • 2682 Views
  • 0 replies
  • 0 Likes
  • 1031 Posts
  • 68 Subscriptions