This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
About user9891
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About user9891
4Posts
0Likes
1Solution
Last Visited
User
Activity
User
Profile
Latest posts by user9891
| Subject | Views | Posted |
|---|---|---|
| 779 | 04-05-2023 07:29 AM | |
| 858 | 03-31-2023 12:13 PM | |
| 707 | 02-15-2023 02:55 PM |
User Badges
Community Statistics
| Member Since | 08-11-2022 11:15 AM |
| Date Last Visited | |
| Posts | 4 |
04-05-2023
07:29 AM
Needed to be: response = requests.post(url, headers=headers, json=params)
... View more
03-31-2023
12:13 PM
I was able to use "get_endpoints" because in that instance, the PARAMS are just {}. But with /public_api/v1/alerts/get_alerts/ : >>> PARAMS = {"request_data": {"filters": [{"field": "alert_id_list","operator": "in","value": [88299]}]}} >>> r = requests.post(url=url,headers=headers,params=PARAMS) >>> print(r.json()) {'reply': {'err_code': 500, 'err_msg': 'Got an invalid input while processing XDR public API', 'err_extra': 'request_data must be of type: dict'}} Am I missing something here? >>> type(PARAMS) <class 'dict'>
... View more
02-15-2023
02:55 PM
I am trying to add an External Dynamic List to our PA-440.
The External Dynamic List is hosted on an external web server by one of our security partners. This web server is https enabled and authentication is via username/password. This is the screenshot when you go to the EDL's Source URL:
According to this documentation, in order for the firewall to authenticate to this server, I will need to add the Intermediate CA certificates that match the certificates installed on the server the firewall is authenticating. With that profile, I will have the option to add a username and password to the External Dynamic List object when I add the correct Certificate Profile.
Here is the documentation that states I need to add the Intermediate CA certificates that match the certificates installed on the server the firewall is authenticating:
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/use-an-external-dynamic-list-in-policy/configure-the-firewall-to-access-an-external-dynamic-list
My understanding of this is I needed to:
Download the Intermediate CA certificate from the external web server that's hosting the EDLs
Import this Intermediate CA certificate into the Certificate Manager
Create a Certificate Profile to add to the EDL object.
Downloading the Intermediate CA Certificate:
To download the Intermediate CA certificate from the external webserver that's hosting the EDLs.
Click the lock icon:
Click on "Connection Secure":
Click on "More Information":
Click "View Certificate":
Click the middle certificate (the Intermediate CA), scroll down and download the cert file (.PEM)
> Is this the correct file to be downloading?
> The UserTrust CA is already in the list of Trusted Certificate Authorities in the Certificate manager of the PA-440, so this Intermediate CA Certificate is all I should need.
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks