Importing anti-virus content using cURL and XML-API

[sondreha]

Hi everyone

I'm writing a script to automate installation of new anti-virus content. The anti-virus content is downloaded from dynamic updates on the palo alto support site.

The problem arises when I try to import the new anti-virus content using the following command:

curl --insecure --form file=@ANTI-VIRUS_CONTENT_FILE "//firewall/api?key=GENERATED_KEY&type=import&category=anti-virus"

The file seems to be uploaded but I can not see it on the firewall and I get the following xml response:

<response status="error" code="17"><msg></msg></response>

I'm running PAN-OS 5.0.4

What am i doing wrong?

Any help would be greatly appreciated

[SRA]

That's the right query. I just tried it on my PA-200 on PAN-OS 5.0.4-h1 and it works right. Are you trying this to the device via Panorama using the target parameter?

[sondreha]

Thanks for the answer. Yes I was trying to import to the device using the target parameter in panorama. I ran a support case on it an Palo Alto told me that it's not possible to use the target parameter with import. Thankfully i was able to solve my problem without needing to import any files. So in the end it wasn't a problem:)

[rneser]

Hi,

how did you manage to download the content? My script for importing the update are ok. (using plink) But I am searching for a method to download the updates for the PA site.

Regards,

Ralph

[sondreha]

I used a combination of the perl modules WWW::Mechanize and Mojo::DOM. WWW::Mechanize to log in to the support site and get the page with the link to the content and Mojo::DOM to extract the link using CSS-selectors and then downloaded it using wget. The code is here. It's the downloadContentVersion subroutine that does the job. The code is terribly messy. It was only used for testing. and then i found that it was easier to do it all through panorama and dropped the code. I made my final script available here.

[rneser]

thanks for your reply and help.

Ralph