About batd2

batd2 · ‎12-09-2022

I am working on automation for managing multiple password changes in Panorama and in the API calls only work with password hashes, rather than the plain text password. Have you any idea what is the process for creating(and reading) the password hash. I presume it uses the Panorama master key. I am aware that there is a CLI command for generating a hash (> request password-hash password) but it will not be very efficient when changing a few hundred usernames and it will be better to have the password generation handled within the automation script.

batd2 · ‎11-21-2022

@GabrielMontiel Very good idea. Thank you

batd2 · ‎10-17-2022

@jennaqualls Is there plan to return the Ignite in Europe? This would have been much easier for us to attend

batd2 · ‎09-28-2022

@JimmyHolland It is working with the API call and using the SDK. Sorry, I must have been testing it previously with different PanOS version or I am not sure what was wrong.

batd2 · ‎09-28-2022

@JimmyHolland Also on 9.1.14, but for me the above does full commit - the changes of all users are committed and not only of the specified user.

batd2 · ‎09-26-2022

@JimmyHolland it does not seem to work in API (at least not in 9.1). I still get full commit, even if the admin is specified, but I guess it is some sort of bug behaviour and good to know the feature is there.

batd2 · ‎09-15-2022

Will there be a boot camp running around the Europe time zones?

batd2 · ‎09-15-2022

@JimmyHolland Thank you for the information. The reason I am asking is because it is kind of suggested that Terraform is used for the initial build and initial configuration, rather than configuration management.

batd2 · ‎09-14-2022

Hi all Do you use Terraform for managing Panorama configuration and particularly routine security policies creation and changes? Is there any issues and do you have any feedback? I know this can be done well with Ansible, but for number of reasons Ansible cannot be used in our case.

batd2 · ‎09-09-2022

Is there a way to create device under a parent or move a device group using the sdk. Similar to Operational command: > request move-dg dg1 new-parent-dg dg1_parent create-dg yes I am aware of the dg_hierarchy opstate, which helps finding the device group, but how can I set the parent when creating a new group? DeviceGroup.create() method just places the new group under shared and this fails in cases of having depended objects on the parent device group. In the fist case I need to create a new group as member of parent device group. In the second case I want to "clone" device group with a new name under new parent. Any help how to do that?

batd2 · ‎08-12-2022

@gfreeman Thank you, I wasn't aware of the feature. I think there is a bug in preventing from working (at least on the version I am testing with), but this looks like a bug on the Panorama side.

batd2 · ‎08-10-2022

@BPry Thank you for your response. Maybe I am missing the point of having the "real-time-detection" category, since the traffic will be classified as Malware, Phishing, etc. My understanding was that the category is used to control if traffic is being sent to Advanced URL filtering servers. Do you think that the queries are sent to the server for inspection, regardless of the the action for real-time-detection?

batd2 · ‎08-09-2022

Can you please help me clarify the new real-time-detection category, which is covered by the URL filtering license? According to the article the Advanced URL filtering "real-time-detection" URL category is not a classification by itself, but a real time inspection, which can return either Benign or as one of the risky category types, e.g. Parked, High Risk, etc. The logging entry with real-time-detection category is rarely s... - Knowledge Base - Palo Alto Networks Can you please help me clarify the following: What is the recommended action real-time-detection in a URL filtering profile? Will action "alert" permit any traffic detected by the Advanced URL filtering, regardless of the risk and will setting it to block, also block benign traffic? Do action "allow" disables real time Advanced URL inspection checks?

batd2 · ‎08-03-2022

Can someone help?

batd2 · ‎07-15-2022

It looks like it is only possible to do full commit using API, which is not ideal on a production panorama, because it will commit the changes of all other users. When I create the changes and login using the API username, then I can commit the user specific changes, but not using an API call. Am I missing something? How can I commit only the changes made by the API user?

Member Since	‎01-17-2020 07:36 AM
Date Last Visited	‎04-17-2024 12:52 AM
Posts	127
Total Likes Received	18

Online Status	Offline
Date Last Visited	‎04-17-2024 12:52 AM

About batd2

Re: Primsa Sase Web Security

Re: Primsa Sase Web Security

Primsa Sase Web Security

Prisma Access Cloud API for snippets

Query firewall configuration from Panorama using the REST API

Prisma Access Panorama vs Cloud Managed

Re: Migrating PA-5050 to PA-5410

Re: Terraform object in multiple Panorama Address Groups

Re: Terraform object in multiple Panorama Address Groups

Re: Terraform object in multiple Panorama Address Groups

How to generate password hash

Make pancast available on the major podcast platforms

Recommended action for real-time-detection URL category

Re: Free PCNSE Bootcamp Happening Sept 15 - Oct 13

Re: Half way through Firewall 9.0 Essentials: Configuration and Management (EDU-110)

Re: Prisma Access Panorama vs Cloud Managed

Object import to Cloud Managed Prisma Access

Re: PAN-OS SDK Device Group Hierarchy

Import Existing Security Policies from Panorama to Terraform code (Reverse Terraform for Palo Alto)

Cortex XSOAR: Out of the Box vs. Custom Content

How to generate password hash

Re: Import Existing Security Policies from Panorama to Terraform code (Reverse Terraform for Palo Alto)

Re: Ignite ‘22 Registration is Now Open! Discount Code Inside

Re: API Commit for user specific changes

Re: API Commit for user specific changes

Re: API Commit for user specific changes

Re: Free PCNSE Bootcamp Happening Sept 15 - Oct 13

Re: Terraform for Panorama Configuration management

Terraform for Panorama Configuration management

PAN-OS SDK Device Group Hierarchy

Re: API Commit for user specific changes

Re: Recommended action for real-time-detection URL category

Recommended action for real-time-detection URL category

Re: API Commit for user specific changes

API Commit for user specific changes

Unlock your full community experience!

About batd2