This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About ryan.slater
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About ryan.slater
01-03-2023
5Posts
0Likes
0Solutions
Jan 03, 2023Last Visited
User
Activity
User
Profile
Latest posts by ryan.slater
| Subject | Views | Posted |
|---|---|---|
| 1056 | 02-09-2022 05:42 PM | |
| 1261 | 01-18-2022 11:51 AM | |
| 2661 | 10-12-2021 02:05 PM | |
| 2711 | 10-12-2021 10:56 AM | |
| 2816 | 10-11-2021 08:19 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 03-25-2020 07:35 AM |
| Date Last Visited | 01-03-2023 02:46 PM |
| Posts | 5 |
02-09-2022
05:42 PM
Sorry for the late reply. Yes I am targeting the NGFW directly with the playbook, and the NGFW's are managed via a Panorama appliance.
... View more
01-18-2022
11:51 AM
I am trying to create a playbook that will go through a devices active policy and for any Allow rule list out the IPS profile defined for that rule. Currently I have not been able to get my playbook to provide the output of the rules so I can filter, so I know I must be doing something wrong. Here is the playbook that I am currently using: tasks : - name : Get a list of all security rules paloaltonetworks.panos.panos_security_rule_facts : provider : '{{ device }}' details : true rulebase : rulebase register : sec_rules environment : '{{ proxy_env }}' - debug : msg : '{{ sec_rules.rule_details }}' And here is the output that I am currently getting when I run this playbook against a firewall: ok: [FW-LAB] => { "msg": [] } What am I missing to be able to see the full list of rules so I can start to create my filter? RS
... View more
10-12-2021
02:05 PM
Not sure what I must have typo'ed in my first attempt, but after copying your entry, it is now working on my side as expected. Thank you very much for your help. RS
... View more
10-12-2021
10:56 AM
With this change doing a SET I get the following: FAILED! => {"changed": false, "msg": " group -> election-option -> preemptive is invalid"} And with OVERRIDE I get the following: FAILED! => {"changed": false, "msg": "Object cannot be overridden\n"} If I add a "/" to the end of the XPATH ( /config/devices/entry[@name='localhost.localdomain'] /deviceconfig/high-availability/group/) I still have the same errors as I previously had in my past post.
... View more
10-11-2021
08:19 AM
I am working on an ansible playbook for upgrading our Palo Alto Firewall, and one of the requirements that we have is that I have to disable Preemption. I have not been able to find any examples of this so I have been working on creating my own task to add to the excellent examples that have been provided (https://github.com/PaloAltoNetworks/ansible-playbooks). Here is my task so far: tasks : - name : Disable preemption on primary device paloaltonetworks.panos.panos_type_cmd : provider : '{{ primary }}' cmd : 'set' xpath : | /config/devices/entry[@name='localhost.localdomain'] /deviceconfig/high-availability/group/election-option element : | <election-option> <preemptive>no </preemptive> </election-option> When I run this task I get the following error: FAILED! => {"changed": false, "msg": "set failed, may need to override template object first"} And when I change to cmd to override I get the following error: FAILED! => {"changed": false, "msg": "Object cannot be overridden\n"} Additionally the management plan becomes unresponsive for several minutes. I'm sure I am doing something wrong and it is something simple that I am missing on this, but I'm so deep into the weeds on it that I can't see it anymore. Thank you for the help.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-03-2023
02:46 PM
|
Latest Tags
No tags yet
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks