Import TXT or CSV to an Address Group?

[j_della9]

I have a TXT file (I could also save it as a .CSV) of about 2000 known bad IP addresses I want to block traffic to/from. Is there a way to import this list into an Address Group? I see an option to download a dynamic list but I would then have to host the file somewhere externally and have the palo download it. Is there an easier way to do this? 

[Brandon_Wertz]

You can use the migration tool and import a .CSV file specifically for that listing.

I recently did a migration from CheckPoint to a 3020.  Migrated about 10000 unique, rules and objects.  The process worked perfectly.  When I did that migration it was fairly complicated, but I'd think using the .CSV aspect of the tool would be a lot simpler.

You can even use the tool to push the Address Group folder with the objects to your firewall.

[niuk]

You can also use my tool pan-cli , see it described here. Just type 'C:\>pan-cli.exe load -f "address-sample.csv" -u your_login -p "your_password" -d "Panorama or firewall ip address here" -g "name of devicegroup in case target is Panorama'  Format of csv file is pretty straighfroward

 

You can skip address object description. If you skip group name, objects will not be added to group (but created). If you put group name and group doesn’t not exist it will be created for you and objects added to it. The above command was tested with PANOS versions 7 and 8. I included windows binary in the repo, I can upload Linux version, just let me know.

[bradk14]

all valid responses to be sure. but just to throw it out there, I've done the same sort of thing when manually migrating firewalls and what I did was I figured out the commands I needed for the PA CLI to accomplish what I wanted to do and then I took the IP list in Excel (1 row per IP) and basically used the concatenate function to merge the IP with the full command and then copied and pasted it right into the SSH session.

[asingh61881]

Hi if we have tick the shared option, how we can do it