This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About miclark1
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About miclark1
07-07-2021
15Posts
2Likes
0Solutions
Jul 07, 2021Last Visited
User
Activity
User
Profile
Latest posts by miclark1
| Subject | Views | Posted |
|---|---|---|
| 1204 | 12-11-2015 08:28 AM | |
| 1753 | 12-11-2015 08:18 AM | |
| 7538 | 12-11-2015 07:51 AM | |
| 1605 | 12-11-2015 07:22 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 12-11-2015 08:28 AM | |
| 1 Like | 12-11-2015 07:51 AM |
User Badges
Community Statistics
| Member Since | 11-20-2014 01:52 PM |
| Date Last Visited | 07-07-2021 02:30 PM |
| Posts | 15 |
| Total Likes Received | 2 |
12-11-2015
08:28 AM
1 Kudo
Here is a curl example of how to push a shared-policy to a device group in Panorama. The example in the XML API Reference Guide 7.0 documentation has an url encoding issue due to the space in "entry name" Another, not so clean approach, is put %20 in the space "entry%20name" if using the example from the documentation
Push configuration to firewalls in a Panorama DeviceGroup
curl -k -d key=$KEY --data-urlencode "cmd=<commit-all><shared-policy><device-group><entry name='DC100-DG'/></device-group></shared-policy></commit-all>" -d 'type=commit' -d 'action=all' https://192.168.55.5/api/
Michael Clark
Palo Alto Networks
... View more
12-11-2015
08:18 AM
Here is an example on how to delete a something from a rule. If this is truly a user in the rule, you could add this <source-user>user1</source-user>
curl --globoff -k "https://x.x.x.x/api/?type=config&action=delete&key=$KEY&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='allowany']&element=<to><member>any</member></to><from><member>any</member></from><source><member>API-3</member></source><destination><member>API-1</member></destination><application><member>any</member></application><service><member>any</member></service><action>allow</action><log-start>yes</log-start>"
Michael Clark
Palo Alto Networks
... View more
12-11-2015
07:51 AM
1 Kudo
Here is another example using curl if you see encoding errors
curl -k -d key=$KEY --data-urlencode "xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/profiles/custom-url-category/entry[@name='my_malicious_domains']/list" -d 'type=config' -d 'action=set' --data-urlencode "element=<member>http://www.maliciousdomain.com</member>" https://x.x.x.x/api/
... View more
12-11-2015
07:22 AM
Please find a rule example below using curl: with --data-urlencode
for key, I exported the value on my mac from terminal: export KEY=whateverthekeyis
curl -k -d key=$KEY --data-urlencode "xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/rulebase/security/rules/entry[@name='API-Deny-All']" -d 'type=config' -d 'action=set' --data-urlencode "element=<to><member>any</member></to><from><member>any</member></from><source><member>any</member></source><destination><member>any</member></destination><source-user><member>any</member></source-user><category><member>any</member></category><application><member>any</member></application><service><member>any</member></service><hip-profiles><member>any</member></hip-profiles><action>deny</action><log-start>yes</log-start>" https://1.1.1.1/api
Here is another way to do it as well with curl
curl --globoff -k " https://1.1.1.1/api/?type=config&action=set&key=$KEY&xpath=/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name= 'vsys1']/rulebase/security/rules/entry[@name='allowany']&element=<to><member>any</member></to><from><member>any</member></from><source><member>internal-GROUP</member></source><destination><member>APP-GROUP</member></destination><application><member>any</member></application><service><member>any</member></service><action>allow</action><log-start>yes</log-start>"
Michael Clark
Palo Alto Networks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-07-2021
02:30 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks