Automation/API Discussions

Play-book Missing required libraries

My play fails when i include an inventory with an output message:

"msg": "Missing required libraries."

This works okay when I passe the hosts details as a variable from var.yml to my playbook. Not sure what Is wrong but I am testing with the example p

...

Rename zone in security policy through xml api

Hi all,

I'm trying to programatically rename security zone via xml api.

Here's a scenario:

1. Device currently has 5 zones: trust, untrust, dmz, lvl1, lvl2

2. There are 500+ policies where <<trust>> appears as source zone member or destination zone me

...

API call for failed commit

Is there an API call that returns failed commits? Example being if I'm in the Panorama web GUI and click on Tasks at the bottom right, I'll see the Failed commit there. Any way to see the failed commit in an API call?

REST API and host policies

We just got our first PA (3060) and I was doing some research on the REST API. What I would like to do is tie in our IP Address Management system for automation. Like when an IP address is freed, a process would connect to the PA and remove that ho

...

Resolved! Limits on commits

Hi Guys,

We are running scripts to push configurations into the firewalls. Everything is done via CLI and with set statements (I know that it is odd, but that's the way it is). Does anyone know are there any limits on the configuration size because s

...

Global Protect Windows Client - Check if logged in successfully

Hi,

I have a Windows 7 PC with a client Global Protect agent installed.

How can I tell through an API call eg. powershell or dos style command that I have successfully logged on and which 'portal' I am logged into?

Authentication base on Certificate + Ansible

Can I combine the Certificate based authentication on Panorama and use the Ansible module anyway? I cannot see an option for that. When I try manually to get the API key I get this reply, so I assume I cannot use Ansible with my current config?

<html

...

Query api with user reader

Hi, I have created some curl plugins to access via xml api to our Pa-500 and make queries. For that right now I use the admin user to get the id: https: //X.X.X.X/api/? type = keygen & user = admin & password = password The problem that I see that th...

Panorama - Commit-All without specifying Device Group or Template/Stack

Greetings

I would like to implement a simple script that commits all changes that where made to our panorama and afterwards pushes it to all device-groups, template or template stacks.

As far as I understand is that the API call "commit", will only c

...

Security Rule API

I've got a powershell script working that copies my security rules from one device to another but I need to control the order that they are inserted at the destination. I haven't been able to find this in the API browser or other examples. Does anyon

...

What does 'start-at' do in 'show session all filter start-at' do?

the allowed values from the context help is:

<value> <1-2097152> Show next 1K sessions

Can't find refreneces to this anywhere....

Resolved! Remove limit in API returns for 'show session'

Hi - I have the following API call:

?type=op&cmd=<show><session><all><filter><protocol>17</protocol></filter></all></session></show>&key=

which only returns 10240 items - is there a way to return all items?

Resolved! Unused and Duplicate Address Object Script

Hi all,

I saw previously someone posted a Perl script that finds unused address objects, but had some limitations.

From my end, I'm looking at trying to report on this via Powershell through the Invoke-RestMethod cmdlet that I've done against other b

...

Dynamic Tags via XML API with CIDR Range

So the problem I'm running into is that its simple to interact with the XML API, but its not always so easy to figure out where the commands are or how they should be formatted. You guys should really consider some OpenAPI 3 style documentation.

We

...

example for address object ip-netmask edit

I would like to edit an existing address object, just changing it's ip-netmask attribute. However, using the supplied examples I can't seem to get a valid URL for changing it.

Does anyone have a working example?

Discussions

Play-book Missing required libraries

Rename zone in security policy through xml api

API call for failed commit

REST API and host policies

Resolved! Limits on commits

Global Protect Windows Client - Check if logged in successfully

Authentication base on Certificate + Ansible

Query api with user reader

Panorama - Commit-All without specifying Device Group or Template/Stack

Security Rule API

What does 'start-at' do in 'show session all filter start-at' do?

Resolved! Remove limit in API returns for 'show session'

Resolved! Unused and Duplicate Address Object Script

Dynamic Tags via XML API with CIDR Range

example for address object ip-netmask edit

Output format for test/url-info-cloud and test/url-info-host

Wildfire API "Missing required field apikey"

Auto de-register devices in Panorama

Rest API not seeing template variables

Devicegroup hierarchy dump

Panorama REST API python script examples

Re: Ansible PFX Cert Upload not adding key

Ansible PFX Cert Upload not adding key

Unlock your full community experience!

Resolved! Limits on commits

Resolved! Remove limit in API returns for 'show session'

Resolved! Unused and Duplicate Address Object Script