Hello, I have been working on automating our internal URL analysis process, and I've been using the following documentation to get the verdict of a URL via the Wildfire API:Get a WildFire Verdict (WildFire API) (paloaltonetworks.com)When using Example Request 2 in the above link, I replace the placeholder API value (<API KEY>) with my own ...
Hi All,so we have a Panorama, and using terraform to spin up VMs with very basic config using the init cfg (no bootstrap.xml) which auto registers to my Panorama where I have template and device groups defined with the interface, routing and base security policies which sofar seems to be going well.. VM spins up, auto register with Panorama and ...
Hi Team ,We are testing the panos_nat_rule_group on panorama and somehow it is not working1) Below is the official terraform documentation for Panorama Nat Policy grouphttps://registry.terraform.io/providers/migara/pan-os/latest/docs/resources/nat_rule_groupThe example provided is not working. When we do ‘terraform plan’ – it is not showing any ...
Hi All,so managed to do some automatons to the point where we can spin up a PA VM, auto register into Panorama and have policies and template configs applied all automated..The plan is to potentially spin up and tear down large number of VMs in the cloud when needed. one question..- when a device is torn down, how can we 'auto de-register' it fr...
I would like to know about automation possibilities through Strata Cloud Manager to administration of Prisma SASE
Hi All,a newby question on the abilities of terraformthe goal is to auto deploy VM FWs to AWS with as little human involvement as possible for DR events, scaling and new creations - to what extent is this possible? basic steps required:deploy a VM to AWS using terraformbootstrapping (base config, hardening,hostname,mgmt int config etc etc)licens...
Dear All, I am looking for API documentation to achieve the "File Search" operation via API. I did not find this option in the Cortex XDR API documentation, however, wanted to confirm and check if this can be achieved through API or not. Is the API function available to run the "File Search" operation? (“Incident Response --> Action Centre --...
I have a ansible playbook that search after a specific ip and removes it from all addressgroups. However i would also like to remove it from all security rules aswell. The problem is that I would need to build some logic to disable/remove rules if the object is the only one in src/dst, otherwise it would become "any" . Has anyone done this kind ...
Hello, im trying to come with a way to being provided with a devicegroup name, be able to get the objects from the current devidegroup, butalso form each parent devicegroup. With the idea ti try to clean duplicated objects, the issue here is that no matter how i try to get to that i find no method or property to be able to identify parent info....
Dears, Requirement: I have 100+ firewalls that I need to deploy into multiple remote locations and wanted to do it with zero-touch provisioning. Challenge: For initial deployment, we can PANFWs are coming with factory settings with default IP address, username, and password. Though we could build a bootstrap file by changing the default settin...
Hi all, I have been using Panorama's REST API interface lately and I would like to share with you some of the useful python scripts that I have been using in an operational enviroment: Requirements:1. Install Python software (Windows, Linux or MAC) 2. Install the following Python modules:pip install requests -> Allows to execute CURL command...
Hello, We have had a problem with concurrent API call for a long time and it gets worse as we have more equipment.Sometimes if we have too much API call in the same time, we have errors: timeout, error 5xx or others strange erros.The too much API call is realy really low, if we have 2 or 3 on the same time we have an issueFor example, in the tra...
I'm using the Ansible module to upload a certificate to a Template: - name: Import PFX certificate to Template paloaltonetworks.panos.panos_import: provider: '{{ provider }}' template: 'my template' category: 'certificate' certificate_name: 'my_test_cert' format: 'pkcs12' filename: 'mydomain.pfx' passphrase: 'vndfjgo7854wy8pt74e...
I am spinning up a Palo Alto VM 300 on AWS via terraform bootstrapping the vFW via using user data only. This is VM300 on 10.2.3 code. The vFW comes up ok and i dont see any errors in bootstrap as per AWS logs. I am not able to login to vFW for the first time via console using admin/admin. its not giving me any option to change the password as ...
I have a requirement to do a bulk update of a custom service group in Panorama (11.0.1) via the API. This is reading in a list of services from a CSV file. However it only ever applies the last entry in the CSV. What am i doing wrong? I've tried PUT & POST. Post simply errors with a duplicate entry. A PUT to an existing group only inserts t...
