Object add in bunch of policies.

[ChiragP]

Hi All,

An object (IP address: 192.168.1.2 as an example) configured in the PA firewall and assigned it to 50+ security policies as a source/destination address.

Now, I want another object (IP address: 192.168.1.5) assign into the same 50+ security policies as IP 192.168.1.2. What's the fastest way to do it?

I can manually do it by going in each policy that IP 192.168.1.2 configured with and add new object IP 192.168.1.5 there but it's really time-consuming as I need to do it for 50 policies. So just checking if anyone knows the fastest way to do it?

Thank you.

[SutareMayur]

@ChiragP 

API is the option. Below article may help you here.

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-panorama-api/get-started-with-the-pan-os-rest-ap...

And better have address group to use under security policies. So without API also you can add new object in group and avoid repetitive task.

Mayur

[reaper]

click, drag and drop is also possible 😉 but as recommended by @SutareMayur  i'd replace the one object with a group object, then just add the 2 ip to the group

next time, you'll only have to add a new ip to a group once

[ChiragP]

Thanks for the reply. 

Regards.