About dward

Hi @pataylor and all,   This should work to get the predefined URL categories: https://{{host}}/api?key={{key}}&type=config&action=get&xpath=/config/predefined/pan-url-categories   Hope that helps! ... View more

did you ever write a script to either upload or download the updates we are also interested in loading them from a centralized location (local server) - without using panorama ... View more

Before deploying a VM-Series into AWS, you should configure three subnets (management, untrust, and trust) as well as three interfaces corresponding to those subnets.   Attach those interfaces to the VM-Series as you are deploying it - eth0 (first interface configured) should be on the management network.  I usually make eth1 my untrust interface and eth2 is my trust interface.   When the instance comes up, ethernet1/1 in the firewall maps to eth1 and ethernet1/2 maps to eth2.  If you configure the interfaces in the firewall management GUI to match the configuration in the AWS portal, you should be ready to go.  You can also set the interfaces to DHCP and they should get the appropriate IP addresses assigned automatically. ... View more

Hi Chau,   you need to script out following commands in language of your choice: 1. login into device, 2. issue commands:   set cli config-output-format set configure delete rulebase security rules YOUR_RULE_NAME profile-setting profiles vulnerability commit exit exit You need to wait for output of the commit to verify you deleted that part of the rule properly and of course you need to replace "YOUR_RULE_NAME" with exact title of your own rule, but other than that you don't need much more. In order to set the profile back, you need a command set rulebase security rules YOUR_RULE_NAME profile-setting profiles vulnerability YOUR_VULNERABILITY_PROFILE_NAME and all other mentioned above (set cli config-output, configure, set..., commit, exit, exit). Succesfull commit should always return a string "Configuration committed successfully" among other stuff.   Best regards, Luciano   ... View more

20 is the default, but this is customizable up to 5000 using nlogs.  Use the following format: https:// <firewall>/api/?type=log&log-type=<type>&nlogs=<number of logs to return>&query=<URL encoded query parameters>&key=<API key> You can use additional modifiers outlined in the API guide to start 5000 logs back and pull the previous 5000 logs.  You can continue doing this until all of the logs of interest are pulled. ... View more