About ksomu

you need to upload the updates ( content/av/url/widfire) manually into  Panorama first and then you need to click "Install from file", select the filename to install the image on the device. Krishna ... View more

If you want to "replace" the 'destination' node, which I think is what you are trying to do, use edit (-e) with that xpath and element and it should work. There is an example in panxapi.html 'Edit the application of a security rule.' which covers a very similar case. An area not explained in the XML API documentation is: what is the difference between set and edit?  I cover this a little in pan.xapi.html and in more detail in some of my API training. ... View more

I had the same issue and the trick is to keep generating the API key untill it consists letters and numbers ONLY ... View more

bart - we are looking into expanding panxapi to support policy moving functionality. I will update you on monday.  could you please send me an email at ksomu@paloaltonetworks.com. I would like to talk to you thanks, krishna ... View more

Copy “API.pm” to “/usr/lib/perl5/5.10.0/PAN” ... View more

please create .panrc file and have your key/credentilas listed in that file. for example ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ cat ~/.panrc username=admin password=admin api_username=admin api_password=admin hostname=10.2.133.15 export TEMPLATE_HOME=/home/ksomu/pan/PAN-perl-20111226/templates/ ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ panxapi  -C commit: success: Commit job enqueued with jobid 5 ksomu@ksomu-VirtualBox:~/pan/PAN-perl-20111226/bin$ panxapi -Xrpo 'show jobs id "5"' op: success $VAR1 = {   job => {     warnings => {       line => [         'Interface ethernet1/14.10 has no zone configuration.',         'Interface ethernet1/14.10 has no virtual-router configuration.'       ]     },     progress => '16:13:45',     status => 'FIN',     details => {       line => 'Configuration committed successfully'     },     stoppable => 'no',     tenq => '2012/03/07 16:13:27',     tfin => '16:13:45',     id => '5',     type => 'Commit',     result => 'OK'   } }; ... View more

The threat names are not part of the configuration.  This is why you are not able to see that information. We have a threat database on the device from which you could pull that information. For example – if you want to pull  the threat name for threat id 30003, this is how you do https://x.x.x.10/api/?type=config&key=hu6jy9KNvrN7oXLsRQMNZpd6JHdyawpcJU727bW0Z7o=& action=get&xpath=/config/predefined/threats/vulnerability/entry[@name='30003']/threatname your action will be "get" and xpath="/config/predefined/threats/vulnerability" . However that xpath will display all the threat objects in the device. So make the xpath more fine grained by  providing the threat id. https://x.x.x.10/api/?type=config&key=hu6jy9KNvrN7oXLsRQMNZpd6JHdyawpcJU727bW0Z7o=&action=get&xpath=/config/predefined/threats/vulnerability/entry[@name='30003'] here is the xpath to get the name of the threat with threat id 30003. https://x.x.x.10/api/?type=config&key=hu6jy9KNvrN7oXLsRQMNZpd6JHdyawpcJU727bW0Z7o=&action=get&xpath=/config/predefined/threats/vulnerability/entry[@name='30003']/threatname   So its  two-step process. you might want to import all the vulnerabilities in to an excel and then merge those vulnerabilities that you are looking for in to your original excel. Thanks, krishna ... View more