Connecting to PAN-OS Firewall Device via SSH and Bypassing HTTPS - Ansible Galaxy (PaloAltoNetwork)

[khangt]

Hi all, 

I'm new to Ansible and am trying a specific use case where I am connecting to a PAN-OS firewall device through SSH and running my panos_op commands. Is there a way to bypass HTTPS as our production firewalls are compliant to our customers with not allowing any HTTPS access from any host. When I run my script, I am getting: "msg": "Failed connection: URLError: reason: [SSL: WRONG_VERSION_NUMBER] wrong version number (_ssl.c:897)". 

My script:

P.S. --- I have already added the Ansible Server IP Address in Panorama that manages all of our PAN-OS devices to the list of permitted IP addresses which is located under Device --> Interfaces --> Management so every host can manage the firewall. 

Any help and input is very appreciated! 🙂 

[gfreeman]

All but like two Ansible modules interact with the PAN-OS XML API (https port 443 by default), not the CLI.  So the client host running Ansible will need 443 access to the PAN-OS management interface to work.