Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Backup Using Powershell

add-type @"using System.Net;using System.Security.Cryptography.X509Certificates;public class TrustAllCertsPolicy : ICertificatePolicy {public bool CheckValidationResult(ServicePoint srvPoint, X509Certificate certificate,WebRequest request, int certificateProblem) {return true;}}"@[System.Net.ServicePointManager]::CertificatePolicy = New-Object T...

minow by L4 Transporter
  • 3908 Views
  • 1 replies
  • 1 Likes

Importing and Loading partial config with Ansible

Hi All, I've successfully can import and load config with ansible, but once it loads it overwrites the existing config.I see from api in Palo there is an option to load partial config with merge, but it doesn't give a mix of partial or from, or mode merge. That might also be a solution to a S2S config automation. Thanks

Configuration of PA Firewall from Asnible - need assitance

Hello Friends, I am new in terms of automation things, I belong to Cisco Network and Secuirty world, however I am learning and implementing Ansible taking help from documents but still no sucess - I still unable to Push Playbook config to directly my Palato Firewall - I have installed asnible - below is version,$ ansible --versionansible 2.4.2.0...

kaijaz by L0 Member
  • 2116 Views
  • 0 replies
  • 0 Likes

Resolved! API - Security Rule Syntax

Version: PAN-OS 8 Hi all, I am attempting to create new security rules in Panorama, but keep getting a response that says a schema node cannot be found I have the following code in a PS function, where $Name is my intended rule name, and $DeviceAddress is my Panorama address "Invoke-RestMethod "https://$DeviceAddress/api/?type=config&action=...

Can't get src.user field via API.

In the below code - I"m using the API to query the URL logs. It works great. What isn't returning though is the src.user field, if it's mapped. How can I get this value? Do I need to do a separate query? JP # Build PAN API Connection and get token pan_conn = pan.xapi.PanXapi(api_username=args.pan_username, api_passw...

punkrokk by L0 Member
  • 1815 Views
  • 0 replies
  • 0 Likes

scheduling quarterly reports

I need to setup quarterly reports for a security review. This can be done by creating a custom time frame but since these can't be scheduled it would require updating the date range every 3 months. Hardcoding a 90 day time frame would seem a simple fix for a future release but in the meantime any suggestions on a better way?

amma by L0 Member
  • 1734 Views
  • 0 replies
  • 0 Likes

Panorama XML API not exporting resolved Hostnames

Hello, I am having difficulty exporting complete data using the XML API. I am scheduling and exporting saved reports using the REST API. The results XML docuemnt is fully formed but the resolved-src field contains the IP address instead of the hostname. When viewing the results in the GUI and exporting to csv the hostname is present. The follow...

Resolved! Show Local Device Policies

Hi all, I'm searching through the API browser on my PAN-OS 8 instance, and wondering where the syntax exists for exploring/getting the local policies per-physical device. Or for clarity's sake - what API endpoint would return all of the local device's security policies. I am using some from Panorama globally, and cleaning up local security polic...

Having an issue with checkboxes in API

I am having an issue with changing settings that use checkboxes through API. For example the setting under /config/devices/entry[@name='localhost.localdomain']/deviceconfig/system/services. If I try to set <disable-telnet></disable-telnet> it says that <disable-telnet></disable-telnet> is an invalid object. If I use the a...

SNMP Monitoring - Missing Data

Hi all, I'm currently working on developing SNMP v3 reporting with data from my PA-3020's and Panorama. While I can successful authenticate commands against each of my desired devices, I am not seeing any clearly available data that represents session data - counts, amount/sec, SSL or IPsec info. In using MIB browsers, I did find certain values...

API error in show > session > distribution > statistics

Attempting API call to: show > session > distribution > statistics we get an error: <response status="error"><msg><line>An error occured. See dagger.log for information.</line></msg></response> dagger.log coatains: 2017-11-14 07:58:35.654 -0500 OPCMD: handler "fpp.distribution"AttributeError: 'fpp' ob...

dberber1 by L2 Linker
  • 1791 Views
  • 0 replies
  • 0 Likes

Resolved! Security rules via API with two vsys

Hello!This morning started with me pulling my hair out...just like yesterday ended. So, here I am. I want to query our Palo Alto firewall via the API to show me security rules...not a big deal. However, the device as two vsys's (or however you write that), and the API query only revealed one security policy, which I know is not right. I've b...

Resolved! Any plan to add operational command support to Ansible?

Hi,Looking for a way to retrive operational command output using Ansible. Many vendors support 'command' module which allow user to run any command. Any plan to support this on PAN?Understand that this can be done through python but would like to have a universal playbook to retrive 'show' commands output from different vendor. thanks,-ns

Retrieving XML API traffic logs with query

I'm trying to retrieve the traffic logs for a user with the following API request: https://panorama/api/?type=log&log-type=traffic&query=user.src+eq+'pa\dmh'&key=<key>If I run this query through the API browser (which has the REST_API_TOKEN field instead of the key field) this works as expected. When I run the above I get: <...

Any Automation tool for Palo Alto

Please suggest any Automation tool or software which can be integrated to firewall:Main requirements:We have many port based rules. which the tools requires to analysze the traffic logs and suggest which application can be replaced with this.Similarly find the rule which can be combained :Rule combining if this can be done by Tools ( instead doi...

  • 1031 Posts
  • 68 Subscriptions