Automation / API


Changes to the LIVEcommunity experience are coming soon... Here's what you need to know.

Automation and Orchestration Tools and Technologies

When configuring and managing the Palo Alto Networks Next-Generation firewall for scale and agility, it’s nice to have a collection of tools to automate activities and events. Our Automation and Orchestration tools and technologies provide a collection of open, extensible projects that help you take the next step. Learn about these tools with detailed documents and join in the discussions with other users to get the most from these resources.

Automation Projects

Available Automation Tools


Automation for Everyone. Ansible is designed around the way people work and the way people work together. Learn more

Device Framework Device Framework

Device Framework enables non-programmers to create sophisticated automations that leverage the PAN-OS API. Learn more

Terraform Terraform

Terraform enables teams to automate deployment and adapt to the changing needs of cloud infrastructures. Learn more

Automation Blog

Terraform Provider Version 1.6.0 Released

post time: 08-30-2019

The 1.6.0 release contains support for aggregate interfaces, subinterfaces, VLANs, policy based forwarding rules, multiple profile types, and the Google Cloud Platform (GCP) Panorama plugin.

Ansible: Using Facts Modules to do Updates

post time: 07-05-2019

How do you perform small, in-place updates to existing config without knowing the whole picture? This blog article teaches you how to use a facts module and various Ansible functions to do just that.

Ansible Version 2.2 Released

post time: 06-12-2019

Ansible version 2.2 is released, including support for configuring log forwarding profiles, subinterfaces, and more.

Terraform Provider Version 1.5.0 Released

post time: 02-04-2019

The 1.5.0 release contains support for BGP, BFD profiles, an enhanced NAT rule resource, and various user requested enhancements.

Ansible v2.0.0 (Katana) released

post time: 09-27-2018

Version 2.0.0 of Palo Alto Network Modules has been released. This is major release that includes expanded support for Panorama and Next Generation Firewall including very much awaited support for idempotency.


The updated documentation can be found here:


Have questions about automation APIs? Join the Live Community to post your questions and get answers.
Author Topic Views Replies
posted: yesterday updated: yesterday

Create Bulk Address Objects using the XML API

For IP sets which have 1000+ IP objects, we need to create each of the ip objects individually using the XML API. This process takes long execution ti...

117 3
posted: Wednesday updated: Thursday

API-KEY after 9.0. Will it work on all firewalls after the "API Key Lifetime" option is added in 9.0?

Hello to All, I found strange thing that because of the API Key Lifetime option when generating an api key on different firewalls even when using...

250 8
posted: 2 weeks ago updated: 2 weeks ago

Fetch PAN VM details from NSX using REST API or CLI?

HiI need the CLI or API to get the PAN VM info from NSX environment where both are configured under the same vCenter. Can we get pan VM info such...

108 1
posted: 2 weeks ago updated: 2 weeks ago

Intermittent 403 - Failed Connection Errors in Ansible Playbook

I have an ansible playbook that creates address,service objects -> security policy -> Commit and push to different device groups. Randomly ...

123 0
posted: 2 weeks ago updated: 2 weeks ago

Pulling a PCAP Through Splunk Fails Intermittently

I've been working with the Palo app/addons for Splunk. There is the capability to pull a PCAP directly from a firewall (not Panorama) this way. It see...

83 0