Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About JimmyHolland
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About JimmyHolland
Friday
90Posts
14Likes
8Solutions
Jun 18, 2021Last Visited
User
Activity
User
Profile
Latest posts by JimmyHolland
| Subject | Views | Posted |
|---|---|---|
| 39 | Friday | |
| 46 | Tuesday | |
| 81 | 2 weeks ago | |
| 77 | 2 weeks ago | |
| 62 | 2 weeks ago |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 4 weeks ago | |
| 1 Like | 04-23-2021 01:48 AM | |
| 1 Like | 04-08-2021 03:33 AM | |
| 1 Like | 03-25-2021 08:00 AM | |
| 2 Likes | 08-21-2020 04:35 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 3 Likes | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 07-17-2014 06:16 AM |
| Date Last Visited | Friday |
| Posts | 90 |
| Total Likes Received | 6 |
Friday
Hi @Srikant, does this NGFW CLI configuration command help? set deviceconfig setting management disable-commit-recovery yes
... View more
Tuesday
Hello @raji_toor, we have a dedicated MineMeld area in our Live Community, Could I ask you to post your query there please? https://live.paloaltonetworks.com/t5/minemeld-discussions/bd-p/MineMeldDiscussions Thanks!
... View more
2 weeks ago
@KarlaLedesma That's a different question than was originally asked 🙂 We've shown how to retrieve the HIP report for a user. If you say you want the HIP report for all 4000 users, your workflow would be to enumerate the lists of users and machines and IP addresses (via logs or API), and then have some logic to loop through each of the users and get the HIP report for each, storing the results somewhere for whatever the purpose is of the data gathering exercise. You could use your choice of scripting or programming language to implement this workflow/logic. Hope this helps.
... View more
2 weeks ago
Hi @NikKaretko, You can specify multiple members in the element portion, so instead of &element=<member>11.11.16.0/24</member>&element=<member>12.12.17.0/24</member>&element=<member>13.13.17.0/24</member> Use: &element=<member>11.11.16.0/24</member><member>12.12.17.0/24</member><member>13.13.17.0/24</member>
... View more
2 weeks ago
Hio @le.wang, in your example, the current User-ID entry is for username "wangle" per " show user ip-user-mapping-mp ip 10.65.69.147". But , your API call is trying to remove/logout username "11:22:33:aa:bb:cc". Is that the problem?
... View more
2 weeks ago
Hi @KarlaLedesma, I'd recommend getting a successful output on CLI first maybe? Here is my example, try matching everything you see in the HIP logs with the CLI command like I did here, then move to the API after:
... View more
3 weeks ago
Does this help? https://{{host}}/api/?key={{key}}&type=op&cmd=<show><user><hip-report><user>{{username}}</user><ip>{{user-ip}}</ip><computer>{{user-hostname}}</computer></hip-report></user></show>
... View more
3 weeks ago
Does this help? https://{{host}}/api/?key={{key}}&type=op&cmd=<show><user><hip-report><user>{{username}}</user><ip>{{user-ip}}</ip><computer>{{user-hostname}}</computer></hip-report></user></show>
... View more
4 weeks ago
Great news @jkostic1, happy to help. There are parameters to control the input/output format too (e.g. &input-format=json&output-format=json ) in case you wanted to use XML. For future reference, the docs are here (and there's a PDF download button too): https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-panorama-api/get-started-with-the-pan-os-rest-api.html. Also the firewall has docs onboard, at https://{{firewall-hostname}}/restapi-doc
... View more
4 weeks ago
1 Kudo
Hi @jkostic1, I can't help much on the PowerShell side, but the final line in your script needs to have a request that looks something like this: https://{{host}}/restapi/v10.0/Objects/Addresses?name={{object-name}}&location=vsys&vsys=vsys1 Then the body you pass in needs to look something like this (you didn't share what's in the $body variable): {
"entry": {
"@name": "My-Address",
"ip-netmask": "8.8.8.8",
"description": "My test address"
}
} POSTing my REST API call above with Postman works fine, so you just need to translate that into your PowerShell script with the variable names you're using. Maybe it's the shared part in your location, are you on single-vsys or multi-vsys firewall? Or the version? These are the acceptable versions in the API endpoint URI (obvisouly you can only go up to the version which matches the PAN-OS version your firewall is currently running, you can't target v10.0 on a v9.1 firewall, etc): https://{{host}}/restapi/9.0/...
https://{{host}}/restapi/v9.1/...
https://{{host}}/restapi/v10.0/... Hope that helps!
... View more
05-13-2021
10:36 AM
Hi @usabina, I can confirm that as of today this is not available in the REST API, but will be added in a future version of PAN-OS.
... View more
05-12-2021
10:40 AM
Hi @mrzepa2 @grchew, Does this help, for the example of a variable which is an IP address? https://{{host}}/api/?key={{key}}&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/template-stack/entry[@name='{{template-stack-name}}']/devices/entry[@name='{{serial-number}}']/variable&element=<entry name="{{var-name}}"><type><ip-netmask>{{object-ip-1}}</ip-netmask></type></entry>
... View more
05-12-2021
09:17 AM
Hi @Serhan, At Panorama level, this command will get stats for all rules at summary level: https://{{host}}/api?key={{key}}&type=op&cmd=<show><rule-hit-count><device-group><entry name='{{device-group-name}}'><pre-rulebase><entry name='security'><rules><all/></rules></entry></pre-rulebase></entry></device-group></rule-hit-count></show> If you use a similar command for a specific rule, you can detailed stats including last-hit-timestamp: https://{{host}}/api?key={{key}}&type=op&cmd=<show><rule-hit-count><device-group><entry name='{{device-group-name}}'><pre-rulebase><entry name='security'><rules><rule-name><entry name='{{rule-name}}'/></rule-name></rules></entry></pre-rulebase></entry></device-group></rule-hit-count></show> Hope that helps.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Friday
|
Likes Given To
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
