Setting up PAN OS for API access

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Setting up PAN OS for API access

L0 Member

I am trying to enable XML API to my Palo Alto v8.1 firewall. Despite documented steps, it doesnt seem to work. How do I verify if the XML API is setup correctly? Is there a clear step by step process to get the API access enabled?


L7 Applicator

Hi @Pritam39 


On the managementinterface the API is enabled by default if you have enabled https access. On https://FIREWALL/api you can browse the available API commands. All about this API is documented on the paloalto documentation website. Here you can find the page about getting started with the API:


Hope this helps!

Thank for that info. It confirms what I had understood earlier. We have a scanner that uses API calls and cannot scan the firewall although we have followed the steps in that document. The scanner uses Username/Passwords and not Keys so we have not generated the API Key. The error in the scanner says it discovered a 'HTTP' service in place of 'HTTPS'

@Pritam39 wrote:

The error in the scanner says it discovered a 'HTTP' service in place of 'HTTPS'

Is maybe http instead of https enabled on your mgmt interface? Or is the error a general error as https is also http - only encrypted at the transport layer.

  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!