Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Importing anti-virus content using cURL and XML-API

Hi everyoneI'm writing a script to automate installation of new anti-virus content. The anti-virus content is downloaded from dynamic updates on the palo alto support site.The problem arises when I try to import the new anti-virus content using the following command:curl --insecure --form file=@ANTI-VIRUS_CONTENT_FILE "//firewall/api?key=GENERAT...

sondreha by Not applicable
  • 5834 Views
  • 5 replies
  • 0 Likes

Panorama Managed Device List

What is the best way to export/retrieve the managed device list from Panorama?I do not have access to the XML API (yet) so I would have to rely on CLI or Panorama UI (preferred if possible).Thanks in advance,Monica

MLaden by Not applicable
  • 8727 Views
  • 3 replies
  • 0 Likes

Resolved! Fingerprinting Acunetix

Dear PAN Developers,Several times now a developer on our side has reported to us from monitoring tools he manages that people have scanned our critical applications with a freely available Web Application Vulnerability scanner from Acunetix.Our CSO contacted the CTO of Acunetix asking how can we could fingerprint their scanner so as to protect o...

How to create custom vulnerability signature for SIP packets?

Hi,we are trying to create custom vulnerability signature for triggering on the specific string in the udp packet payload with destination port 5060. Unfortunately there is no context for SIP. We used "Pattern Match" and chose "unknown -req-udp-payload" as a context. We applied a Vulnerability protection profile to the security policy (a rule ...

External dashboard based on PANOS API

Hi,I've recently started to play around with the PANOS API, and my goal is to make a dashboard containing some of the key information available from the API.Been trying to do some XML transformation, which seems to be working... barely.What I would like is a dashboard that can be viewed through a web browser without login and displays statistics...

arvesynd by L3 Networker
  • 6077 Views
  • 3 replies
  • 1 Likes

Insert data in http stream?

My goal is the following:have the palo alto insert something into the http stream that would allow me to detect which firewall it went through. I am working on a FW load balancing scenario in which multiple active firewalls can handle each request. I have a script set up on a client to initiate multiple connections to a server and simply downlo...

HTTP Post methods

HIIs there an way that i can create an custom application on PAN to block all HTTP post methods for a specific website or a group of websites? I did try by using some things as follows but dint realy work

Resolved! Wildfire event through the REST API

Hello,I have been looking at the RESTful XML API in order to retrieve logs, and have noticed that the API returns traffic and threat logs, but it does not return wildfire logs.To retrieve threat logs I provide type=logs and log-type=threat as parameters.Wildfire logs show up with type=THREAT and subType=wildfire when retrieved through syslog. Sh...

wissa by Not applicable
  • 10965 Views
  • 6 replies
  • 0 Likes

Problem with PANOS UserID Agent and client probing using WMI.

I am having some difficulty configuring our PAN environment to take advantage of the User-ID feature.The current configuration is as follows:"Enable User Identification" has been selected on all zones where user identification is required A PAN200 device is configured as a User-ID Agent and redistribution point (only the Mgt interface is being u...

LP101835 by L1 Bithead
  • 6912 Views
  • 6 replies
  • 0 Likes

How to protect .net Source code

Hello All,We are a software development company mainly in .net environment.I would like to know if PA can protect .net source code from leaking out of the organization via email or ftp or upload via http/https ?Regards,Satish

hpsadmin by L0 Member
  • 2119 Views
  • 1 replies
  • 0 Likes

Internal Server Error - panxapi

Getting internal server error when using panxapi (both perl and python version). Anybody have any idea why?anonymous:~$ panxapi -sxr /config/devices/entry/vsys/entry/zoneshow: LWP::UserAgent: 500 Internal Server Erroranonymous:~$anonymous:~$anonymous:~$ panxapi -sxr "/config/devices/entry/vsys/entry/zone"show: LWP::UserAgent: 500 Internal Serv...

Snake by L0 Member
  • 4243 Views
  • 3 replies
  • 0 Likes

Listing all of vulnerability or phone-home signature

I created a script that shows all vulnerability or phone-home signature with CSV format.Python and some modules are required but you can run on Mac(Mountain Lion) without installing additional module.This may help when you want to list default action/vendorID/CVE of vulnerability or default action of phone home.example.List all vulnerability sig...

tmyzw by L2 Linker
  • 5085 Views
  • 3 replies
  • 0 Likes

Some Youtube streaming being ID'd as "flash" not "youtube"?

Greetings.We are running PA-3050 HA pairs in active-passive configuration. PANOS 5.0.4 is installed. We have been running 3050's since early May.We have a security policy defined to block all youtube apps for any user, unless they are in a specified Active Directory group, in which case only youtube-base is allowed. This policy is App-ID base...

jmueller by L1 Bithead
  • 4744 Views
  • 5 replies
  • 0 Likes

RegEx for non-delimited SSNs

Using the built-in non-delimited SSN data pattern generates too many false positives to be useful for us. I therefore want to build a regex that will accomplish the same thing. It appears that the regex engine in the Palo Alto is very limited in what it can handle. For example, it does not recognize "\b", any "(?" construct, or "{n}" pattern ...

tspaby by L0 Member
  • 3007 Views
  • 1 replies
  • 0 Likes
  • 1031 Posts
  • 68 Subscriptions