This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About julio.toledo
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About julio.toledo
10-03-2022
4Posts
0Likes
0Solutions
Oct 03, 2022Last Visited
User
Activity
User
Profile
Latest posts by julio.toledo
| Subject | Views | Posted |
|---|---|---|
| 3507 | 07-23-2021 08:49 AM | |
| 3878 | 07-22-2021 09:23 AM | |
| 3945 | 07-19-2021 11:28 AM | |
| 4217 | 07-14-2021 08:46 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 05-21-2021 08:29 AM |
| Date Last Visited | 10-03-2022 12:33 PM |
| Posts | 4 |
07-23-2021
08:49 AM
Ding, ding, ding! We have a winner. So what I am looking to accomplish is audit/research level work. On a competitor's product (which shall remain nameless) I am able to issue the following simple, single-line CLI command (on a device-by-device basis) and get back an exhaustive std output of every member rule matching the IP that I'm searching for --either as source or as destination: show access-list | include {{ lookupIP }} This is exactly the kind of functionality that I'm looking for from Panorama/PAN-OS.
... View more
07-22-2021
09:23 AM
Thanks @JimmyHolland I figured out how to structure a 'security-policy-match', however it's requiring arguments that make the query far too specific/narrow. It seems that both 'protocol' and 'destination-port' are required, and neither one allows 'any' or '*' or even a range of values (integers only). Is there a way to match policies across: all PAN-OS devices (without having to explicitly enumerate them) all destination-ports (i.e. "any") all IP protocols ( i.e. "any", or at least {6,17} ).
... View more
07-19-2021
11:28 AM
Thanks @JimmyHolland. Yes, I am trying to query security rules via API, either aggregate rules from all devices or from a particular device. However I am not a network or firewall engineer, so things like PanOS CLI commands and Panorama schema (objects, properties, etc.) are new to me. I find it hard to understand that there is no online reference to the Panorama schema and how it maps to either CLI commands and/or API requests. Reverse engineering it by debugging the GUI or the CLI seems rather backwards, don't you agree?
... View more
07-14-2021
08:46 AM
Trying to find the correct syntax for querying Panorama for policy post rules by matching IP address (source or destination IP) using the PanOS XML API. I have looked at: our XML API Browser page (i.e. https://<mypanoramahostname>/api), the online docs (https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-panorama-api/), A documented Postman collection(https://documenter.getpostman.com/view/2937330/7LgDQwG), and this LIVEcommunity site. Still not finding what I am looking for. Is it me, or is API not sufficiently well documented? Can anyone point me to where I can find documentation for each PanOS XML API endpoint, preferably with syntax examples for all possible endpoint parameters?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-03-2022
12:33 PM
|
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks