Adding Address object through the CLI

[GC66]

Hello,

We use O365 and on what seems like a weekly basis they multiple  new addresses that we need to whitelist. I would be great if PAlo had an object for this that they kept up to date, but I guess they don't

We therefore need to add these addresses to the firewall and they to an address group, using something similar to

> configure

# set address <AddressObject_01> ip-netmask 1.1.1.1/32

# set address <AddressObject_02> fqdn my.example.com

# set address <AddressObject_nn> ip-range 2.2.2.2-3.3.3.3

# set address-group <AddressGroup> static [ <AddressObject_01> <AddressObject_02> ...<AddressObject_nn> ]

This works fine direct to a firewall, but we have 4 configured through Panorama, and this does not seem to work.

Does anybody konw if this is possible through Panorama?

Thanks

[pankaku · Accepted solution]

check the following doc:

https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Import-Palo-Alto-Networks-Firewall-C...

[GC66]

Thanks, that's sorted it, don't suppose you know the syntax to add an address object to an address group?

[pulukas]

set address-group GROUPNAME static MEMBERNAME