This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Start a conversation

Retrieving XML API traffic logs with query

I'm trying to retrieve the traffic logs for a user with the following API request:

 

https://panorama/api/?type=log&log-type=traffic&query=user.src+eq+'pa\dmh'&key=<key>

If I run this query through the API browser (which has the REST_API_TOKEN field ins

...

Any Automation tool for Palo Alto

Please suggest any Automation tool or software which can be integrated to firewall:

Main requirements:

We have many port based rules. which the tools requires to analysze the traffic logs and suggest which application can be replaced with this.

Similarl

...

Resolved! Retrieving Security and NAT rules through API

Hi all,

 

So far I've been able to sort out and match various device group objects according to my needs.

 

Now I'm trying to find in the API where I can retrieve information on Security and NAT rules so I can view attributes.

 

My goal is to see what sub-

...

Resolved! Register ip into DAG delayed

hi all,

I noticed that everytime I push a new IP into a DAG it takes a while for it to register. sometimes it takes 30 seconds, sometimes longer. is there a way to make this into effect instantaneously ? Thanks

bartoq by • L3 Networker
  • 2541 Views
  • 1 replies
  • 0 Likes

Resolved! API - Listing Device Group Addresses by Location

Hi all,

 

In exploring the XML API, I have come across a stumbling block.

 

What I'm attempting to sort out is under the Objects tab > Addresses in the side panel.

 

I have some addresses as Shared, and others that are not shared objects and specific to a

...

SSL decryption and MineMeld

Everyone knows that each individual environment faces certain challenges when implementing SSL inspection.  This is my third environment rolling this out and I am thinking that there has to be an easier way than turning on SSL inspection, breaking fu

...

DIRTT by • L2 Linker
  • 1433 Views
  • 0 replies
  • 0 Likes

Panorama & Global Protect

Hi,

 

How do I look at Global Protect users on Panorama? I can run the command "show global-protect-gateway current-user" on the firewall but I wanted to run the command from Panorama as I have multiple firewalls terminating VPNs.

Rule creation/modification dates

I'm writing a script to alert when a new MAC address is seen for an IP address that's listed in an Internet-facing rule. I have it working pretty well, but I want to avoid alerting on rules that are themselves new. I'm calling the API via /config/dev

...

ekenda2 by • L1 Bithead
  • 2400 Views
  • 1 replies
  • 0 Likes

Panorama XML API

Is the XML API on Panorama limited to the same API as the devices?  I discovered if I switch the  context in the Panorama web console using the "Context" dropdown and then issue an XML API call like:

   https://PANORAMA/esp/restapi.esp?type=config&key

...

tgarrett by • Not applicable
  • 7422 Views
  • 6 replies
  • 0 Likes

Resolved! API error in 7.1.11

 

 

api/?type=op&cmd=<show><config><audit><info/></audit></config></show>

 the <admin> tag used to return the admin's name as 'bob', but in 7.1.11 returns it as 'bob.' -- with a period at the end.  Not sure how/where to report it, and obviously it is pr

...

dberber1 by • L2 Linker
  • 3207 Views
  • 7 replies
  • 0 Likes

Resolved! How to add V-Wire Subinterface via the API

I've tried several different variations and I can't seem to figure out the API call to add a v-wire subinterface. What would the correct syntax be? 

Here's one example that I have tried: 

https://firewall/api/?type=config&key=KEY&action=set&xpath=/conf

...

CIS Palo Alto Recommendation Auditing

Just curious if anyone has any knowledge of an existing tool to check for compliance with the CIS recommendations for Palo Alto firewalls?

 

https://www.cisecurity.org/benchmark/palo_alto_networks/

 

I'm considering authoring in PHP and using the API to

...

bradk14 by • L4 Transporter
  • 1943 Views
  • 1 replies
  • 0 Likes

Get a list of files downloaded by User-ID

I'm working on some IR automation and am trying to find a way to get a list of files downloaded by a user from my PA. I was thinking of triggering a custom report but I'm not sure if I can get that information from the reports.

 

Is there any way to ge

...

Resolved! Retrieve Device List and VSys names using Pan Rest API

Hi All,

Our Panorama is configured to talk to multiple devices. These devices have multiple "vsys" configured. I am trying to use the Pan REST API to get a list of devices and vsys names that are in the Panorama, so a customer can choose which device

...

vp194m by • L1 Bithead
  • 9509 Views
  • 10 replies
  • 0 Likes
  • 1034 Posts
  • 71 Subscriptions
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2024 - Palo Alto Networks