test_security_policy_match limitation with pan version 8

[deepak12]

HI, @gfreeman and all ,

Just wanted to confirm , if we have limitation for test_security_policy_match cmd for Pan version 8 , getting error while pulling  security rule name ? Same cmd is working fine for me if i am running for firewall having version 9 .

I tried to pull output using fw.xapi.op as well but same result .

Thanks 

[gfreeman]

I believe this command was added to pandevice in the 8.x timeframe, so it should work.

What is the command you're running against both firewalls, and what is the error you're seeing when running against the 8.x firewall?

[deepak12]

HI @gfreeman  ,

Please find error details below against fw version 8:

==============Policy detail==================
Traceback (most recent call last):
File "finaltestversion.py", line 67, in <module>
x = fw.test_security_policy_match(from_zone=srczone, to_zone=dstzone, source=srcip, destination=dstip, port=dstport, protocol=proto)
File "C:\U\site-packages\pandevice\base.py", line 4873, in test_security_policy_match
'name': elm.attrib['name'],
KeyError: 'name'

However again version 9 i am getting output as expected i.e policy name , index and action .

[deepak12]

hi @gfreeman ,

just checking if you got a chance to check for error .

Thanks .

[gfreeman · Accepted solution]

Please try updating your pandevice/base.py file as shown here and tell me if this fixes it:

https://github.com/PaloAltoNetworks/pandevice/commit/284710ac8633330fed1ef2d96180a2e955785e90

[deepak12]

@gfreeman ,

Thanks ,  i will test this and update you.

[deepak12 · Accepted solution]

HI @gfreeman 

I have tested it and working as excepted .

Thanks a lot for your help   🙂