Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

XML API user-id connected server

i have successfully setup the XML API using the example provided in the documentation and it is working fine.i used kiwi syslog and vb script.when monitoring using the User-ID agent (version 4.1.5-1) i notice that my Active Directory servers how as connected but my one syslog server shows disconnected with hundreds of entries each having a diffe...

XML API - ACC Report per device

Hi guys,For PAN5.0, from my understanding, If I need to get ACC report with filtering "device serial number", via API from Panorama, I have to create "custom report" with filtering first, right?https://192.168.103.229/api/?type=report&reporttype=custom&reportname=xx&key=yyI was wondering if there are other ways more appropriated?Tha...

FEATURE REQUEST: Search applications by tcp/udp port number.

I'm currently working on "migrating" a policy from a port-based firewall to an application aware firewall... The problem I keep running into is what application(s) are already part of the PANOS that use said port?It would be AWESOME if I could search by port number and choose the application that most closely matches my traffic.

sheist by L1 Bithead
  • 4641 Views
  • 5 replies
  • 0 Likes

Api query problem

Hello,I an doing a traffic query through the API like thishttps://pa/api?/type=log&log-type=traffic&query=(add.src in 10.1.1.1)&key=API_KEYI get the response with a job id.But when i try to get the content of the job IDhttps://pa/api?/type=log&action=get&job-id=JOB&key=API_KEYI get the following error<response status="...

mvelazco by Not applicable
  • 3802 Views
  • 3 replies
  • 0 Likes

Configuration change logging options

Hi all,We'd like to implement some detailed config change logging from the PA device, preferably using the API.Ideally, it would contain some/most/all of the fields seen in Monitoring->Logs->Configuration.While we currently have syslog setup which records most of what we need, the above "Before Change" and "After Change" diff comparison wo...

suppa by L0 Member
  • 2634 Views
  • 1 replies
  • 0 Likes

Using the API to refresh the group mapping cache

Hi,Is there a way using the Rest API to refresh the group mapping cache?We're using AD groups where possible to control access in policies, and the system refreshes every hour but sometimes this is too long.I have the CLI command to do this but would like to set this up with the API if possible.Thanks,Eugeneoup

eugenep by L3 Networker
  • 8426 Views
  • 11 replies
  • 0 Likes

Resolved! Does anyone have a good tutorial for the XML-API?

Hi all,I've been trying to wrap my head around how to use the XML-API, and if anyone has any good resources on how to learn this, I'd really appreciate it.Thanks,A.(Now shamelessly accepting the next 54 friend requests.)

Abs by L3 Networker
  • 4837 Views
  • 3 replies
  • 0 Likes

Resolved! Disable rule using XML API 5.0

Dear alll,I am trying to disable a specific rule from the security policy using the XML api...I am sending the following URL:https://192.168.1.1/api/?type=config&action=edit&key=<my_key_here>=&xpath=/config/devices/entry/vsys/entry/rulebase/security/rules/entry[@name='rule1']&element=<disabled>yes</disabled>But ...

ggoudr by L2 Linker
  • 5515 Views
  • 5 replies
  • 0 Likes

Resolved! How to write a custom app signature that allows only a specific DNS query?

We'd like to build a custom app ID that permits only one specific DNS query to make it through... for example, we want wireless clients (which have our Palo Alto as their default gateway) to only query for the DNS A record "vpngateway.example.com"Has anyone built anything like this? The custom app signature tech note focuses specifically on HTTP...

Resolved! Blocking specific DNS lookups via Custom threats - solved!

Hi all,I've got a bit of a challenge that I'm hoping someone may be able to assist me with. We use GloblaProtect (always on) and it's playing havoc with a few of our apps that can access both internal & external servers (eg: Outlook Anywhere, Lync etc..).The biggest challenge we face is that once GP connects, it is able to resolve the intern...

User-ID XML-API with cURL

Hi Everyone.I have been playing with a script to effectively write my own PAN user agent for a rather specific reason.I can confirm that my script generates a valid xml script and I can post it via the api browser and see that the IP address and new username correlate.The bit where I get stuck is getting cURL to post the the xml file to the api....

loki by L1 Bithead
  • 9842 Views
  • 12 replies
  • 0 Likes

Resolved! Trouble deleting custom url category using API

I am trying to delete a specific custom-url-category list member using the XML API. The system either responds with an object not found error or it deletes all members in the list.This is what I get when i show lists:<response status="success" code="19"><result total-count="1" count="1"><list admin="admin" time="2012/05/25 21:59:...

myrick3 by L0 Member
  • 4222 Views
  • 3 replies
  • 0 Likes
  • 1031 Posts
  • 68 Subscriptions