I couldn't the Panorama discussions so I apologize.
I am being asked to import the US sites from this link,
I didn't find an import topic for address groups.
Surely there a way to import a lot of non segment ips into Panorama into a new address group?
CSV sheet maybe?
Pan OS 9.1.10
Hello, you can put up to 50 addresses into a single address group. You cannot use CSV, but you can bang on the keyboard and do a similar command of:
Then you need to create the address objects first, and then add them to an address-group, like below:
set shared address Proofpoint-1 ip-netmask 188.8.131.52/22
set shared address Proofpoint-2 ip-netmask 184.108.40.206/24
set shared address Proofpoint-3 ip-netmask 220.127.116.11/22
set shared address Proofpoint-4 ip-netmask 18.104.22.168/24
set shared address Proofpoint-5 ip-netmask 22.214.171.124/24
set shared address Proofpoint-6 ip-netmask 126.96.36.199/19
set shared address-group Proofpoint static [ Proofpoint-1 Proofpoint-2 Proofpoint-3 Proofpoint-4 Proofpoint-5 Proofpoint-6 ]
It is tedious, but this is what you will need to do. Obviously, substitute names and IPs from your list.
Easiest way to do this, and what I would recommend, is that you see if these addresses are published somewhere in an easier to digest format and pull them into an EDL or build out a MineMeld Miner for them if you have that deployed. That way as long as Microsoft is keeping the list up-to-date, you can simply let automation keep your firewall up-to-date.
Otherwise, typing them out manually as @SteveCantwell is the most direct answer. You can whip up something in the API to add any address or range inputed into a CSV easily enough if this is something you plan on doing regularly.
I looked at your URL, and it has 26 objects for the US, or 35 if you include Preview US. Using @SteveCantwell's method, you could knock it out in a matter of minutes. You can create IP Range objects for the ranges. You will need to manually check it from time to time to keep it up to date, which is why an @BPry's EDL method is the best long term. However, I don't think there is an EDL for that list.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!