How to convert security policies into an excel file in Palo Alto Firewall

[Yasir]

I am looking for a way to convert exsisitng security policies in PA firewall in PAN-OS version 7.0.x to an excel or CSV file. I found no valid way or documents. Can any body help me.

Cheers

Yasir

[santonic]

There is no such built-in function. 

But it shouldn't be too difficult to write a script which parses XML config file and rewrites it as CSV as XML is nicely structured.

[pulukas]

I've used this user script in version 5 & 6 in the past.  Not sure if it still works in version 7.

https://live.paloaltonetworks.com/t5/API-Articles/Simple-export-of-rules-as-Excel-or-HTML/ta-p/65082

[clyde.franklin]

With Pan Configurator  service-edit.php if I want to delete unused objects is it possible to set a count limit? For exampel I dont want to do all 500 at one time unt say 100 at a time. Look to see if there is a string   like "maxcount' to end comman below.

 php address-edit.php  in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)' 

[clyde.franklin]

With Pan Configurator  service-edit.php if I want to delete unused objects is it possible to set a count limit? For exampel I dont want to do all 500 at one time unt say 100 at a time. Look to see if there is a string   like "maxcount' to end comman below.

 php address-edit.php  in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)' 

[Raido_Rattameister]

Follow those steps to convert rules into Excel.

https://indeni.com/how-to-export-palo-alto-networks-firewalls/

[clyde.franklin]

Hi  thanks for reply but was acutally lookin gofr answer on below? Not sure if my post heading was mixed up.

With Pan Configurator  service-edit.php if I want to delete unused objects is it possible to set a count limit? For exampel I dont want to do all 500 at one time unt say 100 at a time. Look to see if there is a string   like "maxcount' to end comman below.

 php address-edit.php  in=2473.xml out=/dev/null actions=delete 'filter=( object is.unused)'