Get a full list of security rules with IPS Profiles

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Get a full list of security rules with IPS Profiles

L1 Bithead

I am trying to create a playbook that will go through a devices active policy and for any Allow rule list out the IPS profile defined for that rule.  Currently I have not been able to get my playbook to provide the output of the rules so I can filter, so I know I must be doing something wrong. 

Here is the playbook that I am currently using:

  tasks:
    - name: Get a list of all security rules
      paloaltonetworks.panos.panos_security_rule_facts:
        provider: '{{ device }}'
        details: true
        rulebase: rulebase
      register: sec_rules
      environment: '{{ proxy_env }}'

    - debug:
        msg: '{{ sec_rules.rule_details }}'
 
And here is the output that I am currently getting when I run this playbook against a firewall:
 
ok: [FW-LAB] => {
"msg": []
}
 
What am I missing to be able to see the full list of rules so I can start to create my filter?
 
RS
2 REPLIES 2

L5 Sessionator

Hi @ryan.slater, are you targeting NGFWs with the Ansible playbook? An do the NGFWs only have rules pushed from Panorama? If so, I see the same behaviour. I -do not- see an empty list if I target NGFWs with locally configured rules.

Help the community: "Like" helpful comments, and click "Accept as Solution" if you found your answer 🙂

Sorry for the late reply.  Yes I am targeting the NGFW directly with the playbook, and the NGFW's are managed via a Panorama appliance.

  • 2389 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!