This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Start a conversation

Resolved! Retrieving Security and NAT rules through API

Hi all, So far I've been able to sort out and match various device group objects according to my needs. Now I'm trying to find in the API where I can retrieve information on Security and NAT rules so I can view attributes. My goal is to see what sub-tags are available in the schema for those objects so I can discover via a script I'll write whic...

Resolved! Register ip into DAG delayed

hi all,I noticed that everytime I push a new IP into a DAG it takes a while for it to register. sometimes it takes 30 seconds, sometimes longer. is there a way to make this into effect instantaneously ? Thanks

Resolved! API - Listing Device Group Addresses by Location

Hi all, In exploring the XML API, I have come across a stumbling block. What I'm attempting to sort out is under the Objects tab > Addresses in the side panel. I have some addresses as Shared, and others that are not shared objects and specific to a location. What I'm ultimately wanting to do is query just the objects that are not shared vers...

SSL decryption and MineMeld

Everyone knows that each individual environment faces certain challenges when implementing SSL inspection. This is my third environment rolling this out and I am thinking that there has to be an easier way than turning on SSL inspection, breaking functionality for users, and then whitelisting domains/URLs/IPs. Does anyone know of an existing mi...

DIRTT by • L2 Linker
  • 1940 Views
  • 0 replies
  • 0 Likes

Panorama & Global Protect

Hi, How do I look at Global Protect users on Panorama? I can run the command "show global-protect-gateway current-user" on the firewall but I wanted to run the command from Panorama as I have multiple firewalls terminating VPNs.

Rule creation/modification dates

I'm writing a script to alert when a new MAC address is seen for an IP address that's listed in an Internet-facing rule. I have it working pretty well, but I want to avoid alerting on rules that are themselves new. I'm calling the API via /config/devices/entry/vsys/entry/rulebase/security/rules, but the data I get back doesn't include any creati...

ekenda2 by • L1 Bithead
  • 3511 Views
  • 1 replies
  • 0 Likes

Panorama XML API

Is the XML API on Panorama limited to the same API as the devices? I discovered if I switch the context in the Panorama web console using the "Context" dropdown and then issue an XML API call like: https://PANORAMA/esp/restapi.esp?type=config&key=KEYVALUE&action=show OR https://PANORAMA/esp/restapi.esp?type=config&key=KEYVALUE...

tgarrett by • Not applicable
  • 14197 Views
  • 6 replies
  • 0 Likes

Resolved! API error in 7.1.11

api/?type=op&cmd=<show><config><audit><info/></audit></config></show> the <admin> tag used to return the admin's name as 'bob', but in 7.1.11 returns it as 'bob.' -- with a period at the end. Not sure how/where to report it, and obviously it is pretty minor.

dberber1 by • L2 Linker
  • 4966 Views
  • 7 replies
  • 0 Likes

Resolved! How to add V-Wire Subinterface via the API

I've tried several different variations and I can't seem to figure out the API call to add a v-wire subinterface. What would the correct syntax be? Here's one example that I have tried: https://firewall/api/?type=config&key=KEY&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/network/interface/ethernet/entry[@nam...

CIS Palo Alto Recommendation Auditing

Just curious if anyone has any knowledge of an existing tool to check for compliance with the CIS recommendations for Palo Alto firewalls? https://www.cisecurity.org/benchmark/palo_alto_networks/ I'm considering authoring in PHP and using the API to see as far as I can get with it, but obviously if there's already a solution available, no point ...

bradk14 by • L4 Transporter
  • 2654 Views
  • 1 replies
  • 0 Likes

Get a list of files downloaded by User-ID

I'm working on some IR automation and am trying to find a way to get a list of files downloaded by a user from my PA. I was thinking of triggering a custom report but I'm not sure if I can get that information from the reports. Is there any way to get this information from a custom report or via the API? Any pointers are appreciated. Thanks,DH

Resolved! Retrieve Device List and VSys names using Pan Rest API

Hi All,Our Panorama is configured to talk to multiple devices. These devices have multiple "vsys" configured. I am trying to use the Pan REST API to get a list of devices and vsys names that are in the Panorama, so a customer can choose which device and vsys the config commands can be sent to.What API calls do I need to do to achieve this?Thanks...

vp194m by • L1 Bithead
  • 15525 Views
  • 10 replies
  • 0 Likes

API key after configuration migration

Hello,We have old PA-4060 with 4.1.12 version of software which is operated using XML API. Sometime in the past we have generated API key and since then we are using API requests to make periodical changes on the firewall. And all this is working fine.Now I have to migrate configuration from existing PA-4060 to new PA-5050. For now we will be us...

Export address objects via API fails

I am using this procedure to attempt to export address objects, but it is failing: https://live.paloaltonetworks.com/docs/DOC-5065 I generated a key and then used this query against the firewall. Microsoft Excel with a 'Data From Web' query (or even putting this string in the document into a web browser address bar) -- both just return:<resp...

ball7068 by • L0 Member
  • 2540 Views
  • 1 replies
  • 0 Likes

Resolved! Alert when user goes online

Ladies and gentlemen, I have a use-case where some sales people etc, don't show up online for a long time and it's hard for me do remote maintenance or troubleshooting on thier PCs.. eg.. broken Windows Updates. Is there a way I can automatigically quiery PAN FW log and alert me when the user finally pops up online?

NileG by • L1 Bithead
  • 4207 Views
  • 3 replies
  • 0 Likes
  • 1031 Posts
  • 68 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks