Panorama API - get content of dynamic address group

[T.Boess]

Hi, I'd like to list the actual content (e.g. IP addresses) of a dynamic address group (e.g. cisco plugin for Cisco ACI). However, I did not find an API call (neither REST nor XML) to achieve this purpose.

Regards

Tilmann

[TomYoung · Accepted solution]

Hi @T.Boess ,

You cannot see the members of a DAG on Panorama.  The NGFW does not send that dynamic information to it.  If you click on more... under Device Groups > Objects > Address Groups on Panormama, you will only see static entries (if they exist).  The same menu on the NGFW will show the members.

The API for the NGFW is below:

https://yourfirewall/api/?type=op&cmd=<show><object><dynamic-address-group><name>yourdag</name></dynamic-address-group></object></show>

Thanks,

Tom