Python script to retrieve unsued/ zero hits security policy on PAN firewall

[sandeep.paul]

I an new to automation though worked on cisco automation before, want to know any basic scripts for PAN firewalls with Python.

Note: New idea are welcome

[gfreeman]

As of PANOS 8.0, there is no rule hit count for policies.

[gfreeman]

Nevermind, there's a whole article devoted to this topic:

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Unused-Policies-on-a-Palo-Alt...

[ajr0]

8.1 now has this available in gui

should be fairly straightforward to use xml api to find xpath to make python script

[JoeAndreini]

Unused rules are easy, either through the web GUI or the CLI.  It should be possible to run the CLI command via the API as an "operational command" call.

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Unused-Policies-on-a-Palo-Alt...