Only superuser can export threat-pcap using API in 7.1?

Hi,

It has been possible to export threat-pcap using the API without superuser account but since 7.1 I now have to use superuser account for export. Should not the read-only support account be enought?

Is this a bug or new behaviour?

// Johan

using Panorama as a proxy for api calls

I read that you are supposed to be able to use Panorama as a proxy to update DAG on managed firewalls.

As far as I know, DAG are part of the User-ID section but when I browse to /api on my Panorama there isn't a User-ID section. 

Could someone expl

Duplicating a rulebase for App-ID adoption

Hi,

For App-ID adoption in a pretty critical environment, we would like to duplicate each and every rule right above itself. Not a duplication of the entire rulebase above or below the rulebase. This would make it easier to compare the app-id rule wi

Delete URL from URL Category using api

I'm wanting to be able to delete specific URLs from Objects -> Custom Objects -> URL Category using the api.  I have refered to an existing post here that offers a solution however, I am getting an error when I run the command.  My command running on

PAN-OS 7.1 Commit all for number of device groups using XML API

Can I commit to more then one device group using commit-all or any other XML API  ?

XML tags

I would like to get xml data and put it into database. Unfortunately data is in tags not values

and I dnon't know what data it is. For example

<virtual-wire /> instead of <interface-type>virtual-wire</interface-type>

Is it possible to change xml output?

Script to pull Logs of +/- 1 minute for beacon detection

Hello Community,

I am looking for some recommendations on how to review beacon detection.  There is a lot of manual work being done to review each beacon detection.  We seem to be finding it mostly as malware-advertisements from different web pages

IP to User Mappings are not being updated via the User-ID XML API

PA200 with PAN OS 7.1.0 using User-ID XML API connecting to Extreme Networks Fusion. The IP to User-ID mappings are old and don't update with changes to the mappings pushed to the API from Fusion.

Request for custom signature to identify and block any url with .exe file

There is a SSL decryption bug with no work around yet.  I would like to block all urls which contain .exe files when SSL decryption is not taking place for some reason.

‘HTTP/1.1 406 Not Acceptable’ response from API when using CURL

I am running curl against the API URL where I have VM-1000-HV PAN (7.0.1) and getting ‘HTTP/1.1 406 Not Acceptable’ response (see output below). The same URL works fine in the browser (just copied and pasted to Chrome), so it is correct.

Please let me know more detail about API error code 22

Hello Support,

I would like to know exact meaning about "session timed out"
The information for HA state was requested by Linux machine through wget.
but, it had received error code from paloalto.
paloalto could not response for API query at tha

Create a new IP address on a specific interface

I would like to create a new IP address on an interface with xml api. I tried different requests but no one worked.

I tried to use config set wiht the xpath which ended to 

[@name='interface']/ip and after &element=<ip><entry name="x.x.x.x/x"/></ip>

Error when editing Prefirewall Rules related to descriptions value

Report on number of Proxy IDs used against the threshold that are assigned to a Tunnel

Can an API script be created to report on the amount of proxy ids assigned to the tunnel?

I have a case (case#00449370) where customer wants a report on the number of zones, NAT rules, Proxy IDs, etc that are currently used against the threshold.