Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

API call for failed commit

Is there an API call that returns failed commits? Example being if I'm in the Panorama web GUI and click on Tasks at the bottom right, I'll see the Failed commit there. Any way to see the failed commit in an API call?

REST API and host policies

We just got our first PA (3060) and I was doing some research on the REST API. What I would like to do is tie in our IP Address Management system for automation. Like when an IP address is freed, a process would connect to the PA and remove that host's entry in any policy it may be in. Or when we stand up a new public webserver, the process w...

Resolved! Limits on commits

Hi Guys, We are running scripts to push configurations into the firewalls. Everything is done via CLI and with set statements (I know that it is odd, but that's the way it is). Does anyone know are there any limits on the configuration size because sometimes we have config synchronization problems with the secondary box? Cheers

Authentication base on Certificate + Ansible

Can I combine the Certificate based authentication on Panorama and use the Ansible module anyway? I cannot see an option for that. When I try manually to get the API key I get this reply, so I assume I cannot use Ansible with my current config? <html><head><title>400 No required SSL certificate was sent</title></head&g...

Query api with user reader

Hi, I have created some curl plugins to access via xml api to our Pa-500 and make queries. For that right now I use the admin user to get the id: https: //X.X.X.X/api/? type = keygen & user = admin & password = password The problem that I see that this is very insecure because the key is in the plugin and with it could change the configu...

Panorama - Commit-All without specifying Device Group or Template/Stack

Greetings I would like to implement a simple script that commits all changes that where made to our panorama and afterwards pushes it to all device-groups, template or template stacks. As far as I understand is that the API call "commit", will only commit the config change but not push it out to the devices:https://www.paloaltonetworks.com/docum...

faeppli by L1 Bithead
  • 2225 Views
  • 0 replies
  • 0 Likes

Security Rule API

I've got a powershell script working that copies my security rules from one device to another but I need to control the order that they are inserted at the destination. I haven't been able to find this in the API browser or other examples. Does anyone know how to get the rule number or order? Or on the insert side?

Ntripp by L1 Bithead
  • 3889 Views
  • 4 replies
  • 0 Likes

Resolved! Remove limit in API returns for 'show session'

Hi - I have the following API call: ?type=op&cmd=<show><session><all><filter><protocol>17</protocol></filter></all></session></show>&key=which only returns 10240 items - is there a way to return all items?

dberber1 by L2 Linker
  • 3746 Views
  • 2 replies
  • 0 Likes

Resolved! Unused and Duplicate Address Object Script

Hi all, I saw previously someone posted a Perl script that finds unused address objects, but had some limitations. From my end, I'm looking at trying to report on this via Powershell through the Invoke-RestMethod cmdlet that I've done against other bits of the API. What in the schema (if any) on an address object determines whether or not it's a...

Dynamic Tags via XML API with CIDR Range

So the problem I'm running into is that its simple to interact with the XML API, but its not always so easy to figure out where the commands are or how they should be formatted. You guys should really consider some OpenAPI 3 style documentation. We have a tag associated with policy that when I tag an API it applies the policy to the address bein...

hallerr by L2 Linker
  • 2493 Views
  • 1 replies
  • 0 Likes

example for address object ip-netmask edit

I would like to edit an existing address object, just changing it's ip-netmask attribute. However, using the supplied examples I can't seem to get a valid URL for changing it. Does anyone have a working example?

ctr_ts by L1 Bithead
  • 2483 Views
  • 1 replies
  • 0 Likes

Export Script: VM300 export all Config / Rulesets / Policy etc to excel. Error 500

Palo Gurus, Unit: VM-300OS: PAN-OS® 8.0 release (current) I need some help on a Perl script, that has been edited for security (IP, user etc), where I am able to:Setup and API Admin, grant all permissions, use password without special charaters,Setup an Admin Role for API userConnect via https and test API to get the "key"to ensure credentials w...

Proper Syntax for Local Cert Generation

Hi all, Looking for some help on the proper XML structure for an API call to generate a local certificate. Every which way I try sending queries lands me an 'Illegal request [parameter]' response. What I've tried lately was the following (with variables provided from a PowerShell function): <request><certificate><generate><n...

  • 1031 Posts
  • 68 Subscriptions