Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

About Automation/API Discussions

Threads in this discussion area are now read-only. If you have a question about Automation/API products please visit our product discussions.

Discussions

Resolved! Need help with scripting to add member to address group using pandevice command (Python)

Hi All, I am working to get automation script for creating address objects and binding it to address group. I was able to get the script ready and tested working for adding address objects to a firewall using API call. The script is written with pandevice in python. However, I am looking for syntax/command of pandevice to add those address objec...

Resolved! API Commit for user specific changes

It looks like it is only possible to do full commit using API, which is not ideal on a production panorama, because it will commit the changes of all other users. When I create the changes and login using the API username, then I can commit the user specific changes, but not using an API call. Am I missing something? How can I commit only the ch...

batd2 by L4 Transporter
  • 7542 Views
  • 10 replies
  • 0 Likes

XML API is truncating fields in configuration log extraction

Hi all,I’m hoping to leverage of the wisdom of the collective here. I’m wanting to use the XML API to extract configuration logs from a Panorama instance. However I’m noticing the XML API extraction is truncating two fields I need.....before-change-preview and after-change-preview. Does anyone know if it is possible to request full fields in the...

cjcarew by L0 Member
  • 3209 Views
  • 2 replies
  • 0 Likes

Resolved! Netmiko output blank

Hi, I run Netmiko for bulk packet captures in AWS. It works well but there is never output when using the Palo Alto device type. Output for Cisco works well. An example would be: from netmiko import ConnectHandler print("Connecting to Palo Alto to show clock") virtual_palo = { 'device_type': 'paloalto_panos', 'host': '192.168.1.100', 'use...

Resolved! XML-API response for "show running resource-monitor ingress-backlogs"

Hi The XML-API response for /api/?type=op&cmd=<show><running><resource-monitor><ingress-backlogs></ingress-backlogs></resource-monitor></running></show> does not copy the session-id into the session-details. This means there is no way to match the session-id from top-sessions. I know I could p...

Resolved! unable to upload certificate to Panorama via post API

Hello, I am restructuring my python script and with the new structure it is failing to upload certificate to Panorama. I have a working API call: requests.post("https://" + ip + "/api/?&type=import&category=certificate&certificate-name="+certName +"&format=pem&key=" + panapikey, files=file, verify=False) My new structure lo...

Resolved! Panorama Edit a security post-rule REST-API logic

Hi, I was wondering if I'm using the edit security post-rule endpoint correctly or I'm missing something here. I am sending an HTTP PUT request to the panorama to update an existing security rule, but according to the documentation, if I want to update a single field (say the Source Address list), I need to send in the payload all the other fiel...

IP-address is considered to be invalid in PBF policy as a forwarding next hop in ansible

hi , i'm trying to create PBF using ansible module , but looks like it doesn't take "forward_next_hop_type" doesnt take a value as a "ip-address" and even "forward_next_hop_value" doesnt considered as given in task... ansible-task: - name: pbf policypanos_pbf_rule:provider: '{{ provider }}'name: '{{ vendor_name }}_AWS-VPN-PBF-1'from_value: ['SR1...

Templates vs Ansible

Hello, We are configuring all our Firewalls (PA-52xx) via Ansible playbooks with extensive usage of Ansible modules. It works totally fine for us. Configurations are consistent and reinstalling a firewall from scratch works like a charm. We are wondering:- Why bother using templates in panorama when all setups/configs can be automated ?- Is ther...

Anyone using Postman for API calls?

I am new to this API stuff and I am trying to use postman to get just basic objects out of my palo. Just something as simple as "https://192.168.81.50/restapi/9.0/Objects/Addresses" the return I get it cannot get any response. I setup my api key in authentication portion of postman and selected to be added to header and I just cant get anything ...

Automate importing of certificate in broken certificate chain

Hey all, Referring to this article https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/decryption/troubleshoot-and-monitor-decryption/decryption-logs/repair-incomplete-certificate-chains we are looking at whether importing intermediate certificates when this error is seen can be fully automated. Im thinking it would be possible to do this...

Tralna by L0 Member
  • 2007 Views
  • 1 replies
  • 0 Likes

Phishing EDL - Automate phishing link discovery in sample emails?

We have a phishing response procedure which includes obtaining target links in phishing emails and putting them in a custom URL category filter (called "Custom-Phising") in PAN-OS. Due to the volume, I was thinking about using an EDL instead. I think this might simplify the process a little bit but not in a major way. Then I was thinking about...

  • 1031 Posts
  • 68 Subscriptions