Global Protect API to generate ticket

[dpeterson4]

Anyone had any luck with the following API call.

Trying to make front end for the helpdesk to be able to generate tickets to disable global protect if needed.

api/?type=op&cmd=<request><global-protect-portal><ticket><request></request></ticket></global-protect-portal></request>&key=APIKEY

I keep getting the following response

<response status="error">

<msg>

<line>

op command for client sslvpn timed out as client is not available

</line>

</msg>

</response>

Any help would be appreciated.

Thank you,

-Dustin

[LucasGallagher]

This was a goal for us as well, creating a utility that our help desk could use without having to have knowledge of or login via the Panorama interface.  Here are the steps we took to achieve this:

1. Panorama > Admin Roles - Created an Admin Role with the following permissions
   1. WebUI permissions - ONLY Network > GlobalProtect > Portals
   2. XML API - ONLY Operational Requests
2. Panorama > Administrators - Created an Administrator account for the tool to use
3. Generated an API key using said account

In the script the following API call worked to generate a ticket:

api/?type=op&cmd=<request><global-protect-portal><ticket><duration>durationInMinutes</duration><portal>portalName</portal><request>0000-0000</request></ticket></global-protect-portal></request>&key=apiKey

Hope that helps!