About Robert-Wilmes

Microsoft supports a Hardware Security Module based on a Thales appliance. They call the service “Azure Key Vault”.   I looked on the Palo Support site and there doesn’t appear to have any background information on this. Since I just learned that PAN-OS 7.0 supports Thales HSM’s for cert keys, my question is:   Does the new Palo Alto firewall virtual machine for Microsoft Azure support PKI certificates being held in the Microsoft Azure Key Vault ?     ... View more

I have used the XML API command to generate keys using the keygen option but I am searching for the PAN OS CLI command to do the same.   Thanks for your help ... View more

I need help with the XMP API to delete a firewall user from a security rule set. I'm getting an XPath error code = 3 (internal API error) from the following scenario   When I do a config command with action = show, I get a XML structure like this: <response status="success"> <result> <security> <rules>     <entry name="My-Big-Fat-FW-Rules">     <action>allow</action>     <source-user>            <member>xyz\123456</member>            <member>xyz\9876543</member>      </source-user>      <from>              <member>L1-trusted</member>       </from>        .... lots of xml stuff ...       </entry>       <next entry...>        ....  more xml stuff ...        </entry>   </rules> </security> </result>   when I issue the following XPATH command: <...preamble http stuff...>&action=edit&xpath=/config/devices/entry/vsys/entry/rulesbase/security/rules[@name='My-Big-Fat-FW-Rules']/source-user/member[@name='xyz\123456']&element=<member name='xya\10203040'/>"   the API returns <response status="error" code="3"><msg><line>Could not get schema node for xpath /config/devices/entry/vsys/entry/rulesbase/security/rules[@name='My-Big-Fat-FW-Rules']/source-user/member[@name='xyz\123456']</line></msg></response>       The XML API guide says response code=3 is an internal API error.   My question: Is the above XPATH statement the right syntax to navigate to rename the user 'xyz\123456' to 'xyz\10203040' ?   My second question is: Can the Xpath edit action be used to remove the rule by editing 'xyz\123456' to '' ?   My third question is: Since I want to delete this user from this rule, will the above XPATH syntax work with a config request and action=delete ?   My final question concerns commit locks: Is it necessary for me to do a get on the commit-locks and issue an API commit to make the changes take effect ? Is there a sequence diagram of the message flows for this ?   Thanks for your help!!!      ... View more