Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Retrieving XML API traffic logs with query

I'm trying to retrieve the traffic logs for a user with the following API request:

 

https://panorama/api/?type=log&log-type=traffic&query=user.src+eq+'pa\dmh'&key=<key>

If I run this query through the API browser (which has the REST_API_TOKEN field ins

...

Any Automation tool for Palo Alto

Please suggest any Automation tool or software which can be integrated to firewall:

Main requirements:

We have many port based rules. which the tools requires to analysze the traffic logs and suggest which application can be replaced with this.

Similarl

...

Resolved! Retrieving Security and NAT rules through API

Hi all,

 

So far I've been able to sort out and match various device group objects according to my needs.

 

Now I'm trying to find in the API where I can retrieve information on Security and NAT rules so I can view attributes.

 

My goal is to see what sub-

...

Resolved! Register ip into DAG delayed

hi all,

I noticed that everytime I push a new IP into a DAG it takes a while for it to register. sometimes it takes 30 seconds, sometimes longer. is there a way to make this into effect instantaneously ? Thanks

bartoq by L3 Networker
  • 2780 Views
  • 1 replies
  • 0 Likes

Resolved! API - Listing Device Group Addresses by Location

Hi all,

 

In exploring the XML API, I have come across a stumbling block.

 

What I'm attempting to sort out is under the Objects tab > Addresses in the side panel.

 

I have some addresses as Shared, and others that are not shared objects and specific to a

...

SSL decryption and MineMeld

Everyone knows that each individual environment faces certain challenges when implementing SSL inspection.  This is my third environment rolling this out and I am thinking that there has to be an easier way than turning on SSL inspection, breaking fu

...

DIRTT by L2 Linker
  • 1542 Views
  • 0 replies
  • 0 Likes

Panorama & Global Protect

Hi,

 

How do I look at Global Protect users on Panorama? I can run the command "show global-protect-gateway current-user" on the firewall but I wanted to run the command from Panorama as I have multiple firewalls terminating VPNs.

Rule creation/modification dates

I'm writing a script to alert when a new MAC address is seen for an IP address that's listed in an Internet-facing rule. I have it working pretty well, but I want to avoid alerting on rules that are themselves new. I'm calling the API via /config/dev

...

ekenda2 by L1 Bithead
  • 2794 Views
  • 1 replies
  • 0 Likes

Panorama XML API

Is the XML API on Panorama limited to the same API as the devices?  I discovered if I switch the  context in the Panorama web console using the "Context" dropdown and then issue an XML API call like:

   https://PANORAMA/esp/restapi.esp?type=config&key

...

tgarrett by Not applicable
  • 8210 Views
  • 6 replies
  • 0 Likes

Resolved! API error in 7.1.11

 

 

api/?type=op&cmd=<show><config><audit><info/></audit></config></show>

 the <admin> tag used to return the admin's name as 'bob', but in 7.1.11 returns it as 'bob.' -- with a period at the end.  Not sure how/where to report it, and obviously it is pr

...

dberber1 by L2 Linker
  • 3712 Views
  • 7 replies
  • 0 Likes

Resolved! How to add V-Wire Subinterface via the API

I've tried several different variations and I can't seem to figure out the API call to add a v-wire subinterface. What would the correct syntax be? 

Here's one example that I have tried: 

https://firewall/api/?type=config&key=KEY&action=set&xpath=/conf

...

CIS Palo Alto Recommendation Auditing

Just curious if anyone has any knowledge of an existing tool to check for compliance with the CIS recommendations for Palo Alto firewalls?

 

https://www.cisecurity.org/benchmark/palo_alto_networks/

 

I'm considering authoring in PHP and using the API to

...

bradk14 by L4 Transporter
  • 2146 Views
  • 1 replies
  • 0 Likes

Get a list of files downloaded by User-ID

I'm working on some IR automation and am trying to find a way to get a list of files downloaded by a user from my PA. I was thinking of triggering a custom report but I'm not sure if I can get that information from the reports.

 

Is there any way to ge

...

Resolved! Retrieve Device List and VSys names using Pan Rest API

Hi All,

Our Panorama is configured to talk to multiple devices. These devices have multiple "vsys" configured. I am trying to use the Pan REST API to get a list of devices and vsys names that are in the Panorama, so a customer can choose which device

...

vp194m by L1 Bithead
  • 11227 Views
  • 10 replies
  • 0 Likes
  • 1034 Posts
  • 70 Subscriptions
Top Liked Authors