Automation / API

Automation and Orchestration Tools and Technologies

When configuring and managing the Palo Alto Networks Next-Generation firewall for scale and agility, it’s nice to have a collection of tools to automate activities and events. Our Automation and Orchestration tools and technologies provide a collection of open, extensible projects that help you take the next step. Learn about these tools with detailed documents and join in the discussions with other users to get the most from these resources.

Automation Projects

Available Automation Tools


Automation for Everyone. Ansible is designed around the way people work and the way people work together. Learn more

Device Framework Device Framework

Device Framework enables non-programmers to create sophisticated automations that leverage the PAN-OS API. Learn more

Terraform Terraform

Terraform enables teams to automate deployment and adapt to the changing needs of cloud infrastructures. Learn more

Automation Blog

Terraform Provider Version 1.6.0 Released

post time: 08-30-2019

The 1.6.0 release contains support for aggregate interfaces, subinterfaces, VLANs, policy based forwarding rules, multiple profile types, and the Google Cloud Platform (GCP) Panorama plugin.

Ansible: Using Facts Modules to do Updates

post time: 07-05-2019

How do you perform small, in-place updates to existing config without knowing the whole picture? This blog article teaches you how to use a facts module and various Ansible functions to do just that.

Ansible Version 2.2 Released

post time: 06-12-2019

Ansible version 2.2 is released, including support for configuring log forwarding profiles, subinterfaces, and more.

Terraform Provider Version 1.5.0 Released

post time: 02-04-2019

The 1.5.0 release contains support for BGP, BFD profiles, an enhanced NAT rule resource, and various user requested enhancements.

Ansible v2.0.0 (Katana) released

post time: 09-27-2018

Version 2.0.0 of Palo Alto Network Modules has been released. This is major release that includes expanded support for Panorama and Next Generation Firewall including very much awaited support for idempotency.


The updated documentation can be found here:


Have questions about automation APIs? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
posted: 2 hours ago updated: 2 hours ago

Changing Metric of Static Route using API

All, trying to send a command via the API to change the metric value of a static route, this is because occassionally my primary connection is extreme...

50 1
posted: Thursday updated: yesterday

Unable to add static route using Ansible module panos_static_route

Hello Experts, I am trying to add a static route in a PAN FW using the Palo Alto module panos_static_route. Here is the variable file: ...

190 3
posted: Tuesday updated: Tuesday

When I use the API to pull the device-state - am I getting the latest ?

In another article here, from 2014 (precambrian issues) - they broke down some of the insides of the device state config backup.One of the commands li...

150 0
posted: Monday updated: Monday

Traffic log query using curl and retrieval

Hi Team, I presume pan devices allow API requests for traffic query using curl. Attempted following query using curl with no success. Got a promp...

98 0
posted: a week ago updated: a week ago

Module for puppet/ chef for updating HIP opjects?

Hi, has anyone came across modules as such? I basically wanted to remove certain patch version number (eg MS KB number) from the current HIP object an...

124 0