Configuration to Export Address and Address Objects

[Thomas8240]

I would like to review the addresses and address groups on our PA. I was trying to use the article “How to Export Address and Address-group Objects Using PAN-OS API” from the link below to display the address objects and address groups.

https://live.paloaltonetworks.com/t5/Tutorials/How-to-Export-Address-and-Address-group-Objects-Using...

Our current configuration is as follows:

• Model: PA-5080
• Software Version: 7.1.8
• Access is via a network port.
• No Cert on the PA
• ID is read-only

What is the required configuration?

• ID Type: Read-only,  must have  Admin configuration access, Other?
• Certificate required on PA?
• What version of Excel is used? g. Excel 2010 or 2013 or other
• Other??

Please advise,

[nigelswift · Accepted solution]

ID Type: Read-only,  must have  Admin configuration access, Other?

• The admin role used to generate the API key will need to have XML API > Operational Requests permissions

Certificate required on PA?

• This would depend on your client computer's certificate trust store. If you are doing server certificate validation on the client, then it would need to trust the certificate used by the firewall's management interface.

What version of Excel is used? g. Excel 2010 or 2013 or other

• Based on some Microsoft documentation, it appears web queries are supported for 2010 and newer.

https://support.office.com/en-us/article/Get-external-data-from-a-Web-page-708f2249-9569-4ff9-a8a4-7...