Palo Alto API for End of Life services.

[tech_geek2023]

Team,

Any aware if Palo Alto provides any API's which can help with End of Life dates? e.g. check for a device by serial number, by model number, check for the PAN OS version etc.

Regards,

Nikson.

[kiwi]

Hi @tech_geek2023 ,

The "show system info" api call will give you information such as model, PAN-OS version, serial number and more:

XML API Url

/api/?type=op&cmd=<show><system><info></info></system></show>

<response status="success">
<result>
<system>
<hostname>xxxxxx</hostname>
<ip-address>xxxxx</ip-address>
<public-ip-address>unknown</public-ip-address>
<netmask>255.255.255.255</netmask>
<default-gateway>xxxxx</default-gateway>
<is-dhcp>yes</is-dhcp>
<ipv6-address>unknown</ipv6-address>
<ipv6-link-local-address>xxxxxx</ipv6-link-local-address>
<mac-address>42:01:64:40:64:14</mac-address>
<time>Tue Sep 12 01:17:38 2023 </time>
<uptime>102 days, 6:26:12</uptime>
<devicename>xxxxxxx</devicename>
<family>vm</family>
<model>PA-VM</model>
<serial>YOURSERIAL</serial>
<vm-mac-base>7C:89:C1:A6:4F:00</vm-mac-base>
<vm-mac-count>256</vm-mac-count>
<vm-uuid>xxxxxxxx</vm-uuid>
<vm-cpuid>xxxxxxxx</vm-cpuid>
<vm-license>VM-100</vm-license>
<vm-cap-tier>6.5 GB</vm-cap-tier>
<vm-cores>8</vm-cores>
<vm-mem>30865416</vm-mem>
<relicense>0</relicense>
<vm-mode>GCE</vm-mode>
<cloud-mode>cloud</cloud-mode>
<sw-version>11.0.0</sw-version>
<global-protect-client-package-version>6.1.0</global-protect-client-package-version>
<device-dictionary-version>93-429</device-dictionary-version>
<device-dictionary-release-date>2023/09/08 11:36:02 PDT</device-dictionary-release-date>
<app-version>8751-8269</app-version>
<app-release-date>2023/09/05 12:59:12 PDT</app-release-date>
<av-version>4571-5088</av-version>
<av-release-date>2023/09/10 12:24:37 PDT</av-release-date>
<threat-version>8751-8269</threat-version>
<threat-release-date>2023/09/05 12:59:12 PDT</threat-release-date>
<wf-private-version>0</wf-private-version>
<wf-private-release-date>unknown</wf-private-release-date>
<url-db>paloaltonetworks</url-db>
<wildfire-version>802720-806502</wildfire-version>
<wildfire-release-date>2023/09/12 00:57:51 PDT</wildfire-release-date>
<wildfire-rt>Disabled</wildfire-rt>
<url-filtering-version>20230912.20125</url-filtering-version>
<global-protect-datafile-version>unknown</global-protect-datafile-version>
<global-protect-datafile-release-date>unknown</global-protect-datafile-release-date>
<global-protect-clientless-vpn-version>0</global-protect-clientless-vpn-version>
<logdb-version>11.0.0</logdb-version>
<plugin_versions>
<entry name="vm_series" version="4.0.0">
<pkginfo>vm_series-4.0.0</pkginfo>
</entry>
<entry name="dlp" version="4.0.0">
<pkginfo>dlp-4.0.0</pkginfo>
</entry>
</plugin_versions>
<platform-family>vm</platform-family>
<vpn-disable-mode>off</vpn-disable-mode>
<multi-vsys>off</multi-vsys>
<operational-mode>normal</operational-mode>
<advanced-routing>off</advanced-routing>
<device-certificate-status>Valid</device-certificate-status>
</system>
</result>
</response>

Kind regards,

-Kim.

[tech_geek2023]

Thanks Kim. I have managed to write a python script to extract that information from the device.

The challenge is what can I do next?

I will have to send this PAN OS version or the serial number to some database, right?

Does Palo Alto have any such Public API's features where we can send the details?

Regards,

Nikson.

[kiwi · Accepted solution]

Hi @tech_geek2023 ,

The only information about end-of-life or end-of-support I know off is listed on the EoL Resources page where you'll find information for hardware and software EoL plus end-of-sale announcements.

With the extracted script info you should be able to match the model with the hardware EoL and the PAN-OS version with the software EoL dates on those pages. Or are you looking for something more specific ?

Kind regards,

-Kim.