Script to create multiple nodes on PANOS

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Script to create multiple nodes on PANOS

L1 Bithead

Hi all,


Is there a quick way to script / create 50+ nodes on a PA Firewall (azure based)?





Cyber Elite
Cyber Elite


Are you just talking about creating large numbers of address objects? 

Exactly yes!


You could export the config, modify/add the objects, and then import it. I dont see a way to do it with the API, but I could be wrong. Also can be done with Panorama.



Couple ways you can do it, as @OtakarKlier has already mentioned:


set address "My Server" ip-netmask 

You could set all of your set statements how you want and paste them in, which would work fine. 


Configuration File:


# FQDN #
            <entry name="">
# Netmask #
            <entry name="Test-GlobalProtect">

You can locate where these go in your configuration file easier if you search for <address-group> since <address> is referenced a bit in the configuration file. 




You can use any of these methods to build out your address object base quickly. Personally; I'm a big fan of modifying the configuration file itself and feeding it back into the firewall, because you can put the configuration file into Git, but I also find XML easy to work with. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!